Remote Code Execution Vulnerability in HPE OneView
CVE-2025-37164

10CRITICAL

Key Information:

Vendor

HP (HP)

Status
HP Oneview
Vendor
CVE Published:
16 December 2025

What is CVE-2025-37164?

A remote code execution vulnerability has been identified in HPE OneView, allowing an attacker to execute arbitrary code on affected systems. Exploitation of this weakness could enable unauthorized control over system operations, leading to potential data breaches and system compromise. It is essential for organizations using HPE OneView to assess their versions and apply necessary security updates to mitigate this risk.

Affected Version(s)

HPE OneView 0 < 11.00

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-37164 : Remote Code Execution Vulnerability in HPE OneView