Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-37088 EUVD-2025-12197GHSA-qch9-x3vr-h45w

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration,…

Published Apr 22, 2025 · Updated Apr 25, 2025 · Assigned by hpe

Vendor: Hewlett Packard Enterprise (HPE) Product: HPE Cray Data Virtualization Service (DVS)

Description

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Cray Data Virtualization Service (DVS) < COS Base 3.2.0 COS Base 3.2.0

References