CVE-2025-37095: Path Traversal
Published Jun 2, 2025
·Updated
A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.
Affected Software
2 affected components
HPE StoreOnce Software
HPE Storeonce System<4.3.11
Event History
Jun 2, 2025
CVE Published
via MITRE·02:14 PM
Data Sourced
via MITRE·02:14 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 3, 2025
News Published
via BleepingComputer·08:55 PM
News Published
via BleepingComputer·08:57 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-37095?
CVE-2025-37095 is rated as a medium severity vulnerability due to its potential to disclose sensitive information.
2
How do I fix CVE-2025-37095?
To mitigate CVE-2025-37095, update to the latest version of HPE StoreOnce Software that addresses this vulnerability.
3
What type of vulnerability is CVE-2025-37095?
CVE-2025-37095 is classified as a directory traversal information disclosure vulnerability.
4
Which software does CVE-2025-37095 affect?
CVE-2025-37095 affects HPE StoreOnce Software.
5
What can an attacker achieve with CVE-2025-37095?
An attacker exploiting CVE-2025-37095 can gain unauthorized access to files outside of the intended directories, potentially exposing sensitive information.