Remote Code Execution Vulnerability in HPE StoreOnce Software
CVE-2025-37089

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
HP Storeonce Software
Vendor
CVE Published:
2 June 2025

What is CVE-2025-37089?

A command injection vulnerability in HPE StoreOnce Software allows attackers to execute arbitrary code on the system. This flaw can be exploited remotely, posing a significant risk to the integrity and confidentiality of the affected systems. Users are strongly advised to assess their systems for exposure and apply available security updates to mitigate potential threats.

Affected Version(s)

HPE StoreOnce Software 0 < 4.3.11

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-37089 : Remote Code Execution Vulnerability in HPE StoreOnce Software