PT-2025-29875 · Hewlett Packard · Hpe Autopass License Server

Published 2025-07-16 · Updated 2025-07-21 · CVE-2025-37107

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE AutoPass License Server (APLS) versions prior to 9.18

Description An authentication bypass allows unauthorized access to the system.

Recommendations Update HPE AutoPass License Server to version 9.18 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-37107

ZDI-25-614

Affected Products

Hpe Autopass License Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-37107 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-614 · Security Note
• https://osv.dev/vulnerability/CVE-2025-37107 · Vendor Advisory
• https://twitter.com/CVEnew/status/1945562932600828022 · Twitter Post
• https://twitter.com/SystemTek_UK/status/1947318724903497982 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us · Note
• https://t.me/cvetracker/27997 · Telegram Post