CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS)

Medium · published April 22, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00161 · 5.0th percentile
Published
2025-04-22T21:55Z
EPSS history
Timeline
  • 22 APR 21:55Z
    A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS)
    cvelistv5