Server-Side Request Forgery in HPE StoreOnce Software
CVE-2025-37090

6.9MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Storeonce Software
Vendor
CVE Published:
2 June 2025

What is CVE-2025-37090?

A server-side request forgery (SSRF) vulnerability has been identified in HPE StoreOnce Software. This flaw allows attackers to send crafted requests from the server, potentially accessing sensitive internal resources or data. Proper safeguards must be implemented to prevent unauthorized exploitation of this vulnerability.

Affected Version(s)

HPE StoreOnce Software 0 < 4.3.11

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-37090 : Server-Side Request Forgery in HPE StoreOnce Software