← Vulnerability feed

Vulnerability record · CVE-2023-30912 · published 25 October 2023

CVE-2023-30912: Hpe oneview code injection vulnerability

Hpe · Oneview

A remote code execution issue exists in HPE OneView.

9.8 CVSS 3.1 Critical EPSS 1.2% · top 31.9% CWE-94 · Code injection
9.8CVSS 3.1 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A remote code execution issue exists in HPE OneView.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04548en_us Vendor Advisory
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04548en_us Vendor Advisory

Track CVE-2023-30912 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-37164HPE OneView remote code execution via code injectionHPE OneView contains a code injection flaw (CWE-94) that allows remote code execution. The vulnerability is network-reachable with no privileges or u…KEVEPSS 90%analysed5.5CVE-2024-42508Hpe oneview information exposure vulnerabilityThis vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.EPSS 0.16%

Source: NIST National Vulnerability Database (record CVE-2023-30912), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.