A critical security vulnerability (CVE-2025-37164) has been discovered in HPE's OneView application. A malicious actor could exploit this vulnerability to trigger remote code execution on an affected system. This security vulnerability affects all versions of OneView up to version 11.00 and was fixed in version 11.00.

More information on vulnerability and update is available on – hpe.com.