CVE-2025-37101 — HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege

CVE-2025-37101

HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege PUBLISHED

Description (CNA)

A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise / HPE OneView for VMware vCenter	affected Prior to v11.7 before 11.7

CWE

CWE-269

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04876en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.