topic Re: HPE OneView Security Update in HPE OneView

HPE OneView Security Update

Thaufique_Mod — Tue, 03 Jun 2025 08:33:23 GMT

Potential security vulnerabilities have been identified in Hewlett Packard Enterprise OneView Software. These vulnerabilities could be exploited allowing a remote attacker to cause a denial of service, code execution or source code disclosure, information disclosure, server-side request forgery (SSRF), and local script execution.

Click the link below from HPE Support Center to get detailed information:

HPESBGN04853 rev.1 - HPE OneView, Multiple Local and Remote Vulnerabilities

Re: HPE OneView Security Update

tirtul — Mon, 16 Jun 2025 15:28:46 GMT

Given the severity of the vulnerability, will workarounds or patches be made available for older releases that some may have for legacy systems?

Re: HPE OneView Security Update

DanCernese — Tue, 17 Jun 2025 13:34:12 GMT

Product manage has shared in our partner-facing slack channel that there are no plans to update prior releases at this time.

Re: HPE OneView Security Update

Kearawill — Thu, 19 Jun 2025 06:20:07 GMT

Thanks for the heads-up. Important reminder to stay on top of updates — especially with vulnerabilities like SSRF and code execution in the mix. Will review the advisory and patch ASAP.