Vulnerabilityhigh

HPE fixed multiple flaws in its StoreOnce software

Security Affairsby @securityaffairsJun 4, 2025 · 13:29 UTC (Jun 4, 2025)1 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-37089 CVE-2025-37090 CVE-2025-37091 CVE-2025-37092 CVE-2025-37093 CVE-2025-37094 CVE-2025-37095 CVE-2025-37096

Tags: cve-2025-37089 cve-2025-37090 cve-2025-37091 cve-2025-37092 cve-2025-37093 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-37091 +7 related CVEs CVE-2025-37093 CVE-2025-37094 CVE-2025-37089 CVE-2025-37092 CVE-2025-37096 CVE-2025-37090 CVE-2025-37095	A command injection remote code execution vulnerability exists in HPE StoreOnce Software	9.8 group max	1%		Jun 2, 2025

From the original article

1 min read at securityaffairs.com

Hewlett Packard Enterprise (HPE) addressed multiple flaws in its StoreOnce data backup and deduplication solution. HPE has released security patches for eight vulnerabilities in its StoreOnce backup solution. These issues could allow remote code execution, authentication bypass, data leaks, and more.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.