Skip to main content

OneView vulnerabilities

1 published alerts for Hewlett Packard Enterprise (HPE) OneView.

Actively exploited (KEV)

CVE-2025-37164

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Hewlett Packard Enterprise (HPE) OneView is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-37164). Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution. CISA remediation due date: 2026-01-28. If you need help checking exposure, call (864) 335-9223.