HPE Patches Critical Flaw in IT Infrastructure Management Software

Back Securityweek

HPE Patches Critical Flaw in IT Infrastructure Management Software

Securityweek • December 18, 2025

Share: View original

Tracked as CVE-2025-37164 (CVSS score of 10), the security defect can be exploited without authentication, the company notes in a barebones advisory.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE Addresses Critical CVE-2025-37164 Flaw in IT Management Software Hewlett Packard Enterprise (HPE) has patched a critical security vulnerability tracked as CVE-2025-37164, which has a CVSS score of 10. This flaw allows unauthenticated remote attackers to execute arbitrary code, posing a significant risk to users of HPE's IT infrastructure management software. 2 sources 45

Extracted Entities

CVEs (1)