218 matches found
HPE OneView id-pools command execution
Added: 12/19/2025 Background HPE OneView is integrated IT infrastructure management software. Problem A vulnerability in the id-pools feature allow remote attackers to execute arbitrary commands by sending a PUT request to the executeCommand API endpoint. Resolution Apply the hotfix referenced in...
HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
Hewlett Packard Enterprise HPE has resolved a maximum-severity security flaw in OneView Software that, if successfully exploited, could result in remote code execution. The critical vulnerability, assigned the CVE identifier CVE-2025-37164 , carries a CVSS score of 10.0. HPE OneView is an IT...
CVE-2025-37164
A remote code execution issue exists in HPE OneView...
CVE-2025-37164
A remote code execution issue exists in HPE OneView...
CVE-2025-37164
CVE-2025-37164 is a remote unauthenticated remote code execution vulnerability in HPE OneView . The flaw resides in the vulnerable PUT /rest/id-pools/executeCommand endpoint, which passes user-controlled input to Runtime.exec(), enabling code execution. Affects versions prior to 11.0; a patch upg...
HPE OneView unauthenticated RCE
This module exploits an unauthenticated RCE vulnerability, CVE-2025-37164, against Hewlett Packard Enterprise HPE OneView. All versions below 11.00 are vulnerable so long as the vendor supplied hotfix has not been applied, however some VM product versions do not enable the vulnerable "ID Pools"...
EUVD-2021-15856
Malware in sbrugna...
EUVD-2021-15855
Malware in sbrugna...
EUVD-2021-13382
Malware in sbrugna...
EUVD-2021-13383
Malware in sbrugna...
EUVD-2020-28264
Malware in sbrugna...
EUVD-2019-3648
Malware in sbrugna...
EUVD-2023-31810
Malicious code in bioql PyPI...
EUVD-2023-31814
Malicious code in bioql PyPI...
EUVD-2023-31816
Malicious code in bioql PyPI...
EUVD-2023-55086
Malicious code in bioql PyPI...
EUVD-2023-31811
Malicious code in bioql PyPI...
EUVD-2023-35252
Malicious code in bioql PyPI...