CVE-2025-37101CWE-269

HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege

High · published June 26, 2025

CVSS v3.1
8.7
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-06-26T05:19Z
EPSS history
Timeline
  • 26 JUN 05:19Z
    HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege
    cvelistv5