Command Injection Vulnerability in HPE StoreOnce Software - HPE
CVE-2025-37092

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
HP Storeonce Software
Vendor
CVE Published:
2 June 2025

What is CVE-2025-37092?

A command injection vulnerability in HPE StoreOnce Software allows attackers to execute arbitrary commands remotely. This can lead to unauthorized access and control over the affected system. Users and administrators are advised to apply patches and follow best security practices to mitigate the associated risks.

Affected Version(s)

HPE StoreOnce Software 0 < 4.3.11

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-37092 : Command Injection Vulnerability in HPE StoreOnce Software - HPE