HPE OneView for VMware vCenter
Moderate fix1 remedy
cpe:2.3:a:hp:oneview_for_vmware_vcenter:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 11.7
HPE OneView for VMware vCenter Vertical Privilege Escalation Vulnerability
Vulnerability
Patched
A vulnerability allowing vertical privilege escalation has been identified in HPE OneView for VMware vCenter (OV4VC) versions prior to 11.7. This issue could be exploited by an attacker with read-only privileges, allowing them to perform administrative actions.
Impact
Exploitation of this vulnerability could allow an attacker with read-only privileges to escalate their rights and perform administrative actions within the application.
Remediation
Users can upgrade to HPE OneView for VMware vCenter (OV4VC) version 11.7 or later to address this vulnerability.
Added: Jun 26, 2025, 6:19 AM
Updated: Jun 26, 2025, 6:19 AM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
5.0exploitability
4.9remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.