File Access Vulnerability in HPE Performance Cluster Manager
CVE-2025-37087
9.8CRITICAL
What is CVE-2025-37087?
A vulnerability exists in the cmdb service of HPE Performance Cluster Manager that could enable an attacker to access arbitrary files on the server host. This unauthorized access presents a substantial risk, potentially allowing sensitive information to be exposed or modified. Organizations using HPE Performance Cluster Manager should take immediate steps to mitigate this risk and safeguard their systems.
Affected Version(s)
HPE Performance Cluster Manager (HPCM) 0 <= 1.12