HPE OneView Software Vulnerability Allows Remote Code Execution

Cyberpress • December 18, 2025

Share: View original

The fixes include both virtual appliance security hotfixes and HPE Synergy Composer security patches tailored for different deployment scenarios.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE OneView Software Vulnerability Enables Remote Code Execution Hewlett Packard Enterprise (HPE) has addressed a critical vulnerability in its OneView software, identified as CVE-2025-37164, which allows attackers to execute arbitrary code remotely without authentication. This flaw affects HPE's infrastructure management software, which is used for managing servers, storage, and networking devices. The vulnerability was reported by Vietnamese security researcher Nguyen Quoc Khanh. 15 sources 81

Extracted Entities

Attack Types (1)

Remote Code Execution

Companies (1)

Platforms (2)

HPE OneView HPE Synergy Composer