What’s Vulnerable › Vulnerabilities

CVE-2025-37149

• Severity: medium (CVSS 6.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-14 · updated 2026-10-08
• Weakness: CWE-125

Description

A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.

Affected products

• Hewlett Packard Enterprise (HPE) ProLiant RL300 Gen11 Server: 0

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04952en_us&docLocale=en_US

Get alerted when CVE-2025-37149 or the next vulnerability affects your stack