CVE-2025-37101

A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).

Score

CVSS 3.1 8.7 High

Status

Deferred - security-alert@hpe.com

Published

2025-06-26

Last modified

2026-02-26

Weaknesses

CWE-269

Affected products

• Hpe Oneview For Vmware Vcenter (Hewlett Packard Enterprise)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04876en_us&docLocale=en_US