Skip to main content

Storeonce System EUVDEUVD-2025-16657

| CVE-2025-37093 CRITICAL
Improper Authentication (CWE-287)
2025-06-02 security-alert@hpe.com
Authentication Bypass Storeonce System
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
Analysis Updated
Apr 16, 2026 - 05:55 EUVD-patch-fix
executive_summary
Re-analysis Queued
Apr 16, 2026 - 05:29 backfill_euvd_patch
patch_released
Patch available
Apr 16, 2026 - 05:29 EUVD
4.3.11
EUVD ID Assigned
Mar 14, 2026 - 16:47 euvd
EUVD-2025-16657
Analysis Generated
Mar 14, 2026 - 16:47 vuln.today
CVE Published
Jun 02, 2025 - 14:15 nvd
CRITICAL 9.8

DescriptionCVE.org

An authentication bypass vulnerability exists in HPE StoreOnce Software.

AnalysisAI

Auth Bypass in HPE StoreOnce backup storage software. One of 6 critical CVEs.

Technical ContextAI

HPE StoreOnce backup appliance — auth bypass.

RemediationAI

Apply HPE security update.

More in Storeonce System

View all
CVE-2025-37096 CRITICAL
9.8 Jun 02

Command Injection Rce (3Rd) in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37092 CRITICAL
9.8 Jun 02

Command Injection Rce (2Nd) in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37089 CRITICAL
9.8 Jun 02

Command Injection Rce in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37095 CRITICAL
9.8 Jun 02

Directory Traversal in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37090 CRITICAL
9.8 Jun 02

Ssrf in HPE StoreOnce backup storage software. One of 6 critical CVEs.
CVE-2025-37091 HIGH
7.2 Jun 02

Command injection remote code execution vulnerability in HPE StoreOnce Software that allows authenticated attackers with
CVE-2025-37094 MEDIUM
5.5 Jun 02

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

Same weakness CWE-287 – Improper Authentication

View all
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8
CVE-2024-53704 CRITICAL POC
9.8
CVE-2015-7755 CRITICAL POC
9.8
CVE-2013-0625 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

EUVD-2025-16657 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy