Hewlett Packard Enterprise (HPE) has issued fixes for a maximum-severity security vulnerability in its OneView infrastructure management software that could allow unauthenticated remote code execution. The flaw, tracked as CVE-2025-37164, carries a CVSS score of 10.0.
OneView is used to centralize and streamline IT operations across HPE systems through