CVE-2025-37164 · Hewlett Packard Enterprise (HPE) OneView: Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
[CISA KEV actively exploited] Vendor: Hewlett Packard Enterprise (HPE) | Product: OneView | Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-01-28 | Ransomware use: Unknown | Added: 2026-01-07 CVEs: CVE-2025-37164. CISA KEV/exploitation signal detected. Vendors: Hewlett Packard Enterprise (HPE). DORA relevance: medium.