The vulnerability of the machineAccountCheck method in the HPE StoreOnce VSA storage system allows a hacker to circumvent security restrictions.

The vulnerability of the machineAccountCheck method in the HPE StoreOnce VSA storage system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

The vulnerability of the queryHardwareReportLocally method in the HPE StoreOnce VSA virtual storage system allows a attacker to execute arbitrary code.

The vulnerability of the queryHardwareReportLocally method in the HPE StoreOnce VSA virtual storage system is related to the lack of measures taken to manage data at the administrative level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the determineInclusionAndExtract method in the HPE StoreOnce VSA virtual storage system allows a attacker to perform an SSRF attack.

The vulnerability of the determineInclusionAndExtract method in the HPE StoreOnce VSA virtual storage system is related to insufficient validation of incoming requests. Exploiting this vulnerability may allow a malicious actor to execute an SSRF attack remotely...

The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized system allows a attacker to execute arbitrary code.

The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized environment is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system allows a attacker to gain access to read and delete any files they desire.

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read and...

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

Hewlett Packard Enterprise HPE has released security updates to address as many as eight vulnerabilities in its StoreOnce data backup and deduplication solution that could result in an authentication bypass and remote code execution. "These vulnerabilities could be remotely exploited to allow...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...