CVE-2025-37094

CVE-2025-37094 describes a directory traversal vulnerability in HPE StoreOnce Software that could enable arbitrary file deletion. The issue is consistently reported across multiple sources (NVD, Red Hat, CNNVD, CVE listings) as a directory traversal flaw in StoreOnce. Severity metrics vary betwee...

CVE-2025-37093

CVE-2025-37093 affects HPE StoreOnce Software. The issue arises from improper implementation in the machineAccountCheck method, enabling remote authentication bypass. HPE patches this as part of a broader fix (pre-4.3.11 versions affected; 4.3.11 and later include the fix). THN notes the vulnerab...

CVE-2025-37092

CVE-2025-37092 is a command-injection remote code-execution vulnerability in HPE StoreOnce Software. The CVE entry notes high-severity impact with potential for full system compromise; initial details indicate network-accessible exploitation with no user interaction. Multiple sources (NVD/NCSC/Re...

CVE-2025-37091

CVE-2025-37091 is a reported command injection leading to remote code execution in HPE StoreOnce Software. The connected sources confirm the affected product (HPE StoreOnce Software) and that the vulnerability enables remote code execution via a command injection vector. However, the provided doc...

CVE-2025-37096

CVE-2025-37096 is a command-injection remote code execution vulnerability in HPE StoreOnce Software. Multiple sources confirm the flaw affects StoreOnce and can lead to unauthenticated network-based code execution with high impact (CVSS 3.1 base score 9.8; high/critical in different assessments)....

CVE-2025-37090

CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...

CVE-2025-37089

CVE-2025-37089 affects HPE StoreOnce Software. The issue is a command-injection path that can lead to remote code execution. No active exploitation reports are provided in the documents. Remediation is via vendor updates/patches released by HPE (as indicated by the NCSC advisory noting vulnerabil...

CVE-2025-37095

CVE-2025-37095 is a directory traversal information disclosure vulnerability in HPE StoreOnce Software. Public records describe vulnerable software as HPE StoreOnce Software and indicate a high-severity impact (confidentiality, integrity, and availability affected) with remote, unauthenticated or...