NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2025-37093

CVSS 3.1: 9.8 critical
EPSS: 1%p64
Published: Jun 2, 2025 · Jun 2, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-37093 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An authentication bypass vulnerability exists in HPE StoreOnce Software.

Vendors: hpe

Products: storeonce system

Weakness: CWE-287

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

4 stories

⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero

The Hacker NewsJul 25, 08:27 UTC · Jul 25, 2026MalwareExploitedCVE-2025-20286 CVE-2025-49113 CVE-2025-5419+83 · 1 read

60

Hewlett Packard Enterprise (HPE) fixed maximum severity OneView flaw

Security AffairsDec 18, 21:11 UTC · Dec 18, 2025Exploit / PoCCVE-2025-37164 CVE-2025-370933 · 2 reads

60

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Hacker NewsJun 4, 05:23 UTC · Jun 4, 2025VulnerabilityExploitedCVE-2025-37093 CVE-2025-37089 CVE-2025-37090+84

60

HPE fixed multiple flaws in its StoreOnce software

Security AffairsJun 4, 13:29 UTC · Jun 4, 2025VulnerabilityCVE-2025-37089 CVE-2025-37090 CVE-2025-37091+52

47