HPE OneView Software Vulnerability Let Attackers Execute Remote Code

Cybersecuritynews •Abinaya • December 18, 2025

A critical security alert warns customers a severe vulnerability in HPE OneView Software that could allow remote attackers to execute arbitrary code without authentication. The flaw, tracked as CVE-2025-37164, carries a CVSS severity score of 10.0, indicating maximum critical risk. Attribute Details CVE ID CVE-2025-37164 Product HPE OneView Software Vulnerability Type Remote Code Execution […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE OneView Software Vulnerability Enables Remote Code Execution Hewlett Packard Enterprise (HPE) has addressed a critical vulnerability in its OneView software, identified as CVE-2025-37164, which allows attackers to execute arbitrary code remotely without authentication. This flaw affects HPE's infrastructure management software, which is used for managing servers, storage, and networking devices. The vulnerability was reported by Vietnamese security researcher Nguyen Quoc Khanh. 15 sources 81

Extracted Entities

HPE OneView Software Vulnerability Let Attackers Execute Remote Code

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)