VULNERABILITY INTELLIGENCE

CVE-2025-37101

CVSS score8.7 HIGH
EPSS probability0.30%
CISA KEVNot currently listed
Published2025-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

Description

A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references