CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37095

CVE-2025-37095 is a directory traversal information disclosure vulnerability in HPE StoreOnce Software. Public records describe vulnerable software as HPE StoreOnce Software and indicate a high-severity impact (confidentiality, integrity, and availability affected) with remote, unauthenticated or...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

CVE-2025-37092 is a command-injection remote code-execution vulnerability in HPE StoreOnce Software. The CVE entry notes high-severity impact with potential for full system compromise; initial details indicate network-accessible exploitation with no user interaction. Multiple sources (NVD/NCSC/Re...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

CVE-2025-37089 affects HPE StoreOnce Software. The issue is a command-injection path that can lead to remote code execution. No active exploitation reports are provided in the documents. Remediation is via vendor updates/patches released by HPE (as indicated by the NCSC advisory noting vulnerabil...

HPESBST04847 rev.2 - HPE StoreOnce Software, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Deletion, Authentication Bypass, Code Execution, Directory Traversal, Disclosure of Information, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce G4/4+ Systems - Prior to v4.3.11 CVSS...

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...

PT-2025-23520 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A directory traversal arbitrary file deletion issue exists. This allows for the deletion of arbitrary files, potentially leading to data loss or system instability. No...