CVE-2025-37164

🗓️ 16 Dec 2025 16:30:34Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 27 Media mentions👁 68 Views🌐 WEB

CVE-2025-37164 is a remote code execution vulnerability in HPE OneView.

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for CVE-2025-37164	18 Dec 202513:41	–	githubexploit
GithubExploit	Exploit for CVE-2025-37164	19 Dec 202522:00	–	githubexploit
GithubExploit	Exploit for Code Injection in Hpe Oneview	6 Jan 202622:23	–	githubexploit
BDU FSTEC	The vulnerability of the HPE OneView IT infrastructure management system, related to improper code generation, allows a attacker to execute arbitrary code.	19 Dec 202500:00	–	bdu_fstec
Circl	CVE-2025-37164	16 Dec 202516:55	–	circl
CISA KEV Catalog	Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability	7 Jan 202600:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	7 Jan 202612:00	–	cisa
CNNVD	HPE OneView 安全漏洞	16 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-37164	16 Dec 202516:30	–	cvelist
EUVD	EUVD-2025-203803	16 Dec 202516:30	–	euvd

NVD

Node

hpe oneviewRange≤10.20.00

[
  {
    "defaultStatus": "unaffected",
    "product": "HPE OneView",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "lessThan": "11.00",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hpe_oneview_rce.rb
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
support	www.support.hpe.com/hpesc/public/docDisplay

Parameter	Position	Path	Description	CWE
cmd	path	rest/id-pools/executeCommand	Unauthenticated remote code execution endpoint in HPE OneView (ID Pools executeCommand).	CWE-94
result	path	rest/id-pools/executeCommand	Unauthenticated remote code execution endpoint in HPE OneView (ID Pools executeCommand).	CWE-94

17 Jun 2026 09:15Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8 - 10

EPSS0.89733

SSVC