CVE-2025-37093

—

CVSS 3.1

9.8 critical

EPSS

1%p64

Published

Jun 2, 2025 (Jun 2, 2025)

Modified

Jun 17, 2026

Description

An authentication bypass vulnerability exists in HPE StoreOnce Software.

Vendors: hpe
Products: storeonce system
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news4 stories

⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero

The Hacker NewsJul 25, 08:27 UTC · Jul 25, 2026Malware in the wildCVE-2025-20286 CVE-2025-49113 CVE-2025-5419+8 CVEs

60

Hewlett Packard Enterprise (HPE) fixed maximum severity OneView flaw

Security AffairsDec 18, 21:11 UTC · Dec 18, 2025Exploit / PoC CVE-2025-37164 CVE-2025-37093

60

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Hacker NewsJun 4, 05:23 UTC · Jun 4, 2025Vulnerability in the wildCVE-2025-37093 CVE-2025-37089 CVE-2025-37090+8 CVEs

60

HPE fixed multiple flaws in its StoreOnce software

Security AffairsJun 4, 13:29 UTC · Jun 4, 2025Vulnerability CVE-2025-37089 CVE-2025-37090 CVE-2025-37091+5 CVEs

47