Lucene search
+L

193 matches found

BDU FSTEC
BDU FSTEC
•added 2025/06/05 12:00 a.m.•13 views

The vulnerability of the `setLocateBeaconOnHardware` method in the HPE StoreOnce VSA virtual storage system allows a intruder to execute arbitrary code.

The vulnerability of the setLocateBeaconOnHardware method in the HPE StoreOnce VSA virtual storage system is related to the lack of measures taken to manage data at the management level. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

9CVSS7.9AI score0.01247EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/05 12:00 a.m.•23 views

The vulnerability of the queryHardwareReportLocally method in the HPE StoreOnce VSA virtual storage system allows a attacker to execute arbitrary code.

The vulnerability of the queryHardwareReportLocally method in the HPE StoreOnce VSA virtual storage system is related to the lack of measures taken to manage data at the administrative level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.9AI score0.01247EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/05 12:00 a.m.•29 views

The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized system allows a attacker to execute arbitrary code.

The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized environment is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.9AI score0.01246EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/05 12:00 a.m.•32 views

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized system allows a attacker to disclose protected information.

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized environment is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information from ...

6.8CVSS6.9AI score0.0118EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/05 12:00 a.m.•17 views

The vulnerability of the machineAccountCheck method in the HPE StoreOnce VSA storage system allows a hacker to circumvent security restrictions.

The vulnerability of the machineAccountCheck method in the HPE StoreOnce VSA storage system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

10CVSS8.2AI score0.01103EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/04 3:18 p.m.•15 views

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS8.6AI score0.01246EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 3:18 p.m.•12 views

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

9.8CVSS6.8AI score0.0118EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 2:10 p.m.•22 views

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

9.8CVSS7.5AI score0.01103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 2:10 p.m.•16 views

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS8.3AI score0.01247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 2:10 p.m.•28 views

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS8.3AI score0.01247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 2:10 p.m.•20 views

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS8.3AI score0.01194EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 2:10 p.m.•18 views

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

9.1CVSS7.1AI score0.00859EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 2:10 p.m.•28 views

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

9.8CVSS7AI score0.00621EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/06/04 5:23 a.m.•10 views

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

Hewlett Packard Enterprise HPE has released security updates to address as many as eight vulnerabilities in its StoreOnce data backup and deduplication solution that could result in an authentication bypass and remote code execution. "These vulnerabilities could be remotely exploited to allow...

9.8CVSS7.6AI score0.01247EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2025/06/04 5:23 a.m.•43 views

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

Hewlett Packard Enterprise HPE has released security updates to address as many as eight vulnerabilities in its StoreOnce data backup and deduplication solution that could result in an authentication bypass and remote code execution. "These vulnerabilities could be remotely exploited to allow...

7.5CVSS8.6AI score0.99957EPSS
SaveExploits2
OSV
OSV
•added 2025/06/02 3:15 p.m.•12 views

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

9.8CVSS5.8AI score0.0118EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/06/02 3:15 p.m.•9 views

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS6.4AI score0.01246EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/02 3:15 p.m.•23 views

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS0.01246EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/02 3:15 p.m.•24 views

CVE-2025-37095

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software...

9.8CVSS0.0118EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/02 3:15 p.m.•17 views

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

9.8CVSS6.3AI score0.01246EPSS
SaveExploits0References1
Rows per page
Query Builder