CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

CVE-2025-37089 affects HPE StoreOnce Software. The issue is a command-injection path that can lead to remote code execution. No active exploitation reports are provided in the documents. Remediation is via vendor updates/patches released by HPE (as indicated by the NCSC advisory noting vulnerabil...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37095: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37093: Improper Authentication

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092: Improper Neutralization of Special Elements used in a Command

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091: Improper Neutralization of Special Elements used in a Command

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090: Server-Side Request Forgery (SSRF)

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089: Improper Neutralization of Special Elements used in a Command

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

PT-2025-23515 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A server-side request forgery vulnerability exists in HPE StoreOnce Software. This issue allows for exploitation through specific API endpoints, although the exact endpoints...

PT-2025-23520 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A directory traversal arbitrary file deletion issue exists. This allows for the deletion of arbitrary files, potentially leading to data loss or system instability. No...

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

CVE-2022-28622

CVE-2022-28622 affects HPE StoreOnce Software. The SSH server supports weak key exchange algorithms, enabling potential remote unauthorized access. A fix is available in HPE StoreOnce Software 4.3.2. Affected product: HPE StoreOnce Software. Remediation: upgrade to version 4.3.2 (or apply the ven...