CVE-2025-37088

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Apr 22, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-370899.8A command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-37099.8Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vuCVE-2025-370909.8A server-side request forgery vulnerability exists in HPE StoreOnce Software.CVE-2025-370919.8A command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370929.8A command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370939.8An authentication bypass vulnerability exists in HPE StoreOnce Software.CVE-2025-370949.1A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.CVE-2025-370959.8A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.CVE-2025-370969.8A command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370977.5A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of serviceCVE-2025-370987.5A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.CVE-2025-370999.8A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
CVE-2025-37088: Medium severity, CVSS 6.8 | Vulnix