CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security-alert@hpe.com

Published

2025-06-02

Last modified

2026-02-26

Weaknesses

CWE-77

Affected products

• Hpe Storeonce Software (Hewlett Packard Enterprise Hpe)
• Storeonce System (Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US