CVE-2025-37094: Path Traversal
Published Jun 2, 2025
·Updated
A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.
Affected Software
2 affected components
HPE StoreOnce Software
HPE Storeonce System<4.3.11
Event History
Jun 2, 2025
CVE Published
via MITRE·02:02 PM
Data Sourced
via MITRE·02:02 PM
DescriptionSeverity
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-37094?
CVE-2025-37094 is classified as a critical vulnerability due to its potential for arbitrary file deletion.
2
How do I fix CVE-2025-37094?
To mitigate CVE-2025-37094, update your HPE StoreOnce Software to the latest version provided by HPE.
3
What are the potential impacts of CVE-2025-37094?
Exploitation of CVE-2025-37094 could lead to unauthorized deletion of critical files, compromising data integrity.
4
Who is affected by CVE-2025-37094?
CVE-2025-37094 affects users of HPE StoreOnce Software that are vulnerable to directory traversal attacks.
5
Is there a workaround for CVE-2025-37094 before applying a patch?
Currently, there are no known workarounds for CVE-2025-37094, so immediate patching is recommended.