CVE-2025-37093: Improper Authentication

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092: Improper Neutralization of Special Elements used in a Command

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090: Server-Side Request Forgery (SSRF)

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089: Improper Neutralization of Special Elements used in a Command

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091: Improper Neutralization of Special Elements used in a Command

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

PT-2025-23518 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce VSA affected versions not specified HPE StoreOnce Software affected versions not specified Description: A command injection remote code execution vulnerability exists in the software. The issue is related to the...

PT-2025-23515 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A server-side request forgery vulnerability exists in HPE StoreOnce Software. This issue allows for exploitation through specific API endpoints, although the exact endpoints...

PT-2025-23516 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A command injection remote code execution issue exists. This allows for the execution of arbitrary commands, potentially leading to unauthorized access and control...

PT-2025-23522 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A command injection remote code execution issue exists. This allows for potential code execution on a remote server. Recommendations: At the moment, there is no information...

PT-2025-23520 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A directory traversal arbitrary file deletion issue exists. This allows for the deletion of arbitrary files, potentially leading to data loss or system instability. No...

PT-2025-23519 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce versions prior to 4.3.11 Description: The issue is related to an authentication bypass vulnerability in HPE StoreOnce, which could allow a remote attacker to bypass security restrictions. This vulnerability may be chained with...

PT-2025-23514 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A command injection remote code execution issue exists in the software. This allows for potential exploitation. The estimated number of affected devices and details about...

PT-2025-23521 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A directory traversal information disclosure issue exists. This allows for potential information disclosure due to directory traversal vulnerabilities in the getServerPayload...

Code injection

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

CVE-2022-28622

CVE-2022-28622 affects HPE StoreOnce Software. The SSH server supports weak key exchange algorithms, enabling potential remote unauthorized access. A fix is available in HPE StoreOnce Software 4.3.2. Affected product: HPE StoreOnce Software. Remediation: upgrade to version 4.3.2 (or apply the ven...

CVE-2022-28622: Use of a Broken or Risky Cryptographic Algorithm

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

PT-2022-19110

Name of the Vulnerable Software and Affected Versions HPE StoreOnce Software versions prior to 4.3.2 Description A potential security issue has been identified in the SSH server of the affected software, where it supports weak key exchange algorithms. This could lead to remote unauthorized access...

HPE StoreOnce 加密问题漏洞

HPE StoreOnce is a cloud backup data protection system from Wise and Technology HPE. A security vulnerability exists in HPE StoreOnce that stems from the SSH server's support for weak key exchange algorithms, which could lead to remote unauthorized access...