CVE-2025-37101
HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
26 jun 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H
Productos afectados
Hewlett Packard Enterprise · HPE OneView for VMware vCenter¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →