CVE-2025-37087
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 22, 2025
Updated: May 1, 2025
CWE ID 862
Summary
CVE-2025-37087 is a newly disclosed vulnerability affecting the cmdb service in HPE Performance Cluster Manager (HPCM). This issue grants unauthorized access, enabling an attacker to retrieve arbitrary files on the server host. The vulnerability poses a significant risk as it could lead to information disclosure, potentially allowing further exploitation of the system. HPE urges users to apply the available patch to mitigate this threat. Failure to address this vulnerability could result in serious data breaches or system compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Performance Cluster Manager
Affected Vendors
- Hewlett Packard Enterprise