CVE-2025-37106
BaseFortify
Publication date: 2025-07-16
Last updated on: 2025-07-25
Assigner: Hewlett Packard Enterprise (HPE)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hpe | autopass_license_server | to 9.18 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-287 | When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an authentication bypass and information disclosure issue in HPE AutoPass License Server (APLS) versions prior to 9.18. It allows an attacker to bypass authentication mechanisms and potentially access sensitive information without proper authorization.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to the HPE AutoPass License Server, resulting in potential disclosure of sensitive information and unauthorized actions that could affect confidentiality, integrity, and availability of the system.