VulnerabilitycriticalExploited in the wild

HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution

The Hacker Newsby @TheHackersNewsDec 18, 2025 · 14:39 UTC (Dec 18, 2025)1 min read3 · 2 reads

Read at thehackernews.com

Analyze CVE-2025-37164 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-37164

Tags: cve-2025-37164 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-37164	Unauthenticated Remote Code Execution in HPE OneView	9.8	90%	KEVPoC	Dec 16, 2025 KEV Jan 7, 2026

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 18, 2025 Vulnerability / Enterprise Security Hewlett Packard Enterprise (HPE) has resolved a maximum-severity security flaw in OneView Software that, if successfully exploited, could result in remote code execution. The critical vulnerability, assigned the CVE identifier CVE-2025-37164 , carries a CVSS score of 10. 0.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.