CVE-2025-37106: Critical severity HPE AutoPass License Server vulnerability
Published Jul 16, 2025
·Updated
An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
Affected Software
2 affected components
HPE AutoPass License Server<9.18
HPE AutoPass License Server<9.18
Event History
Jul 16, 2025
CVE Published
via MITRE·05:53 PM
Data Sourced
via MITRE·05:53 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-37106?
CVE-2025-37106 is considered a high severity vulnerability due to its potential for authentication bypass and information disclosure.
2
How do I fix CVE-2025-37106?
To address CVE-2025-37106, upgrade HPE AutoPass License Server to version 9.18 or later.
3
What type of vulnerability is CVE-2025-37106?
CVE-2025-37106 is an authentication bypass and information disclosure vulnerability.
4
Which versions of HPE AutoPass License Server are affected by CVE-2025-37106?
HPE AutoPass License Server versions prior to 9.18 are affected by CVE-2025-37106.
5
What impact does CVE-2025-37106 have on security?
CVE-2025-37106 can allow unauthorized access to sensitive information, potentially leading to further exploitation.