coldbraid

CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView

Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

CVSS
not scored

CWE-94

On CISA’s exploited list

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Added
2026-01-07
Federal patch deadline
2026-01-28
Ransomware use
not known