PT-2025-23515 · Hewlett Packard · Hpe Storeonce

John Doe · CVE-2025-37090 · Publicado 2024-10-31 · Atualizado 2025-07-02

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE StoreOnce Software (affected versions not specified)

Description A server-side request forgery vulnerability exists in HPE StoreOnce Software. This issue allows for exploitation through specific API endpoints, although the exact endpoints are not specified. No information is provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

BDU:2025-06382

CVE-2025-37090

ZDI-25-313

Produtos afetados

Hpe Storeonce

Referências · 10

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US · Aviso do Fabricante
• https://t.me/cvenotify/127458 · Publicação no Telegram
• https://zerodayinitiative.com/advisories/ZDI-25-313 · Nota de Segurança
• https://t.me/true_secator/7102 · Publicação no Telegram
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US · Nota
• https://t.me/cvenotify/124347 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-37090 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-37090 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-06382 · Nota de Segurança
• https://twitter.com/BlackpointUS/status/1930372953805599146 · Publicação no Twitter