Command Injection Vulnerability in HPE StoreOnce Software
CVE-2025-37096

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
HP Storeonce Software
Vendor
CVE Published:
2 June 2025

What is CVE-2025-37096?

A command injection vulnerability has been identified in HPE StoreOnce Software, which allows attackers to execute arbitrary commands on the host system. This flaw can be exploited remotely, leading to unauthorized access and potential risk to sensitive data. Users are encouraged to apply the latest security updates to mitigate against such threats.

Affected Version(s)

HPE StoreOnce Software 0 < 4.3.11

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.