Skip to main content

Storeonce System CVE-2025-37094

| EUVDEUVD-2025-16658 MEDIUM
Path Traversal (CWE-22)
2025-06-02 security-alert@hpe.com
Path Traversal Storeonce System
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High

Lifecycle Timeline

4
Patch available
Apr 16, 2026 - 05:29 EUVD
4.3.11
EUVD ID Assigned
Mar 14, 2026 - 16:47 euvd
EUVD-2025-16658
Analysis Generated
Mar 14, 2026 - 16:47 vuln.today
CVE Published
Jun 02, 2025 - 14:15 nvd
MEDIUM 5.5

DescriptionCVE.org

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

Analysis

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

Technical ContextAI

Path traversal allows an attacker to access files outside the intended directory by manipulating file paths with sequences like '../'.

RemediationAI

Validate and sanitize file path inputs. Use a whitelist of allowed files or directories. Implement chroot jails or containerization.

More in Storeonce System

View all
CVE-2025-37096 CRITICAL
9.8 Jun 02

Command Injection Rce (3Rd) in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37092 CRITICAL
9.8 Jun 02

Command Injection Rce (2Nd) in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37089 CRITICAL
9.8 Jun 02

Command Injection Rce in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37095 CRITICAL
9.8 Jun 02

Directory Traversal in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37090 CRITICAL
9.8 Jun 02

Ssrf in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37093 CRITICAL
9.8 Jun 02

Auth Bypass in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37091 HIGH
7.2 Jun 02

Command injection remote code execution vulnerability in HPE StoreOnce Software that allows authenticated attackers with

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2018-13379 CRITICAL POC
9.1
CVE-2015-0016 HIGH POC
7.8

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8
CVE-2024-48248 HIGH POC
8.6

Share

CVE-2025-37094 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy