PT-2025-23950 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support IRS versions prior to 7.15.0.646 Description: A path traversal issue exists. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646 or later to resolve the issue...

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized system allows a attacker to disclose protected information.

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized environment is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information from ...

PT-2025-23949 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support versions prior to 7.15.0.646 Description: A vulnerability in HPE Insight Remote Support may allow an unauthenticated denial of service. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646...

The vulnerability of the queryHardwareReportLocally method in the HPE StoreOnce VSA virtual storage system allows a attacker to execute arbitrary code.

The vulnerability of the queryHardwareReportLocally method in the HPE StoreOnce VSA virtual storage system is related to the lack of measures taken to manage data at the administrative level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system allows a attacker to gain access to read and delete any files they desire.

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read and...

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

CVE-2025-37096 is a command-injection remote code execution vulnerability in HPE StoreOnce Software. Multiple sources confirm the flaw affects StoreOnce and can lead to unauthenticated network-based code execution with high impact (CVSS 3.1 base score 9.8; high/critical in different assessments)....

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...