CVE-2025-37164

A remote code execution issue exists in HPE OneView.

Published Dec 16, 2025
CVSS 9.8 critical
90.2% chance of exploitation in the next 30 days (EPSS)
In CISA's Known Exploited Vulnerabilities catalog
A Metasploit module exploits it

Affected software

Hewlett Packard Enterprise HPE OneView

CVE-2025-37164 at the National Vulnerability Database