Skip to main content

Storeonce System CVE-2025-37089

| EUVDEUVD-2025-16653 CRITICAL
Command Injection (CWE-77)
2025-06-02 security-alert@hpe.com
RCE Command Injection Storeonce System
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
Analysis Updated
Apr 16, 2026 - 05:56 EUVD-patch-fix
executive_summary
Re-analysis Queued
Apr 16, 2026 - 05:29 backfill_euvd_patch
patch_released
Patch available
Apr 16, 2026 - 05:29 EUVD
4.3.11
EUVD ID Assigned
Mar 14, 2026 - 16:47 euvd
EUVD-2025-16653
Analysis Generated
Mar 14, 2026 - 16:47 vuln.today
CVE Published
Jun 02, 2025 - 14:15 nvd
CRITICAL 9.8

DescriptionCVE.org

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

AnalysisAI

Command Injection Rce in HPE StoreOnce backup storage software. One of 6 critical CVEs.

Technical ContextAI

HPE StoreOnce backup appliance — command injection RCE.

RemediationAI

Apply HPE security update.

More in Storeonce System

View all
CVE-2025-37096 CRITICAL
9.8 Jun 02

Command Injection Rce (3Rd) in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37092 CRITICAL
9.8 Jun 02

Command Injection Rce (2Nd) in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37095 CRITICAL
9.8 Jun 02

Directory Traversal in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37090 CRITICAL
9.8 Jun 02

Ssrf in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37093 CRITICAL
9.8 Jun 02

Auth Bypass in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37091 HIGH
7.2 Jun 02

Command injection remote code execution vulnerability in HPE StoreOnce Software that allows authenticated attackers with
CVE-2025-37094 MEDIUM
5.5 Jun 02

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

Same weakness CWE-77 – Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2017-6327 HIGH POC
8.8
CVE-2023-34960 CRITICAL POC
9.8
CVE-2023-37679 CRITICAL POC
9.8
CVE-2025-10035 CRITICAL POC
10.0

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2025-37089 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy