CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server host.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - security-alert@hpe.com

Published

2025-04-22

Last modified

2025-05-07

Weaknesses

CWE-862

Affected products

• Hpe Performance Cluster Manager Hpcm (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04840en_us&docLocale=en_US