CVE-2025-37087: Critical severity hpe performance cluster manager vulnerability
A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37087?
CVE-2025-37087 is classified as a high-severity vulnerability due to the potential for unauthorized access to arbitrary files on the server host.
How do I fix CVE-2025-37087?
To remediate CVE-2025-37087, ensure that you apply the latest security patches and updates provided by HPE for the Performance Cluster Manager.
What types of attacks can exploit CVE-2025-37087?
CVE-2025-37087 can be exploited by an attacker to read sensitive information from arbitrary files on the server.
Which software versions are affected by CVE-2025-37087?
CVE-2025-37087 affects all versions of the HPE Performance Cluster Manager that utilize the cmdb service.
Is CVE-2025-37087 being actively exploited in the wild?
As of the latest updates, there have been no confirmed reports of CVE-2025-37087 being actively exploited in the wild.