CVE-2025-37164 — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

CISA KEVExploited: confirmedHewlett Packard Enterprise (HPE)

Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

Vulnerability details

Affected productsOneView
KEV remediation due2026-01-28