CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

CVE-2025-37094 describes a directory traversal vulnerability in HPE StoreOnce Software that could enable arbitrary file deletion. The issue is consistently reported across multiple sources (NVD, Red Hat, CNNVD, CVE listings) as a directory traversal flaw in StoreOnce. Severity metrics vary betwee...

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37093

CVE-2025-37093 affects HPE StoreOnce Software. The issue arises from improper implementation in the machineAccountCheck method, enabling remote authentication bypass. HPE patches this as part of a broader fix (pre-4.3.11 versions affected; 4.3.11 and later include the fix). THN notes the vulnerab...

CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37092

CVE-2025-37092 is a command-injection remote code-execution vulnerability in HPE StoreOnce Software. The CVE entry notes high-severity impact with potential for full system compromise; initial details indicate network-accessible exploitation with no user interaction. Multiple sources (NVD/NCSC/Re...

CVE-2025-37092

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37091

CVE-2025-37091 is a reported command injection leading to remote code execution in HPE StoreOnce Software. The connected sources confirm the affected product (HPE StoreOnce Software) and that the vulnerability enables remote code execution via a command injection vector. However, the provided doc...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37089

CVE-2025-37089 affects HPE StoreOnce Software. The issue is a command-injection path that can lead to remote code execution. No active exploitation reports are provided in the documents. Remediation is via vendor updates/patches released by HPE (as indicated by the NCSC advisory noting vulnerabil...

Hewlett Packard Enterprise StoreOnce 命令注入漏洞

Hewlett Packard Enterprise StoreOnce is a cloud backup data protection system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise StoreOnce that stems from a command injection that could lead to remote code execution...

Hewlett Packard Enterprise StoreOnce 命令注入漏洞

Hewlett Packard Enterprise StoreOnce is a cloud backup data protection system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise StoreOnce that stems from a command injection that could lead to remote code execution...