Back Networkworld

HPE OneView vulnerable to remote code execution attack

Networkworld • December 19, 2025

“For these reasons, the patch should be implemented immediately,” Dukes said. ... It can be resolved by applying a security hotfix , which must be ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE OneView Software Vulnerability Enables Remote Code Execution Hewlett Packard Enterprise (HPE) has addressed a critical vulnerability in its OneView software, identified as CVE-2025-37164, which allows attackers to execute arbitrary code remotely without authentication. This flaw affects HPE's infrastructure management software, which is used for managing servers, storage, and networking devices. The vulnerability was reported by Vietnamese security researcher Nguyen Quoc Khanh. 15 sources 81

HPE OneView vulnerable to remote code execution attack

The full story

Extracted Entities

Attack Types (1)

Platforms (1)