Vulnerabilities

TI-2025-25019 CVE-2025-37107 · GHSA-gjq7-wpxp-5486

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

MEDIUM 49

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2025-07-16 Fixed in 9.18 CWE-287

TI-2025-25018 CVE-2025-37106 · GHSA-vgw5-5g2p-cv79

MEDIUM 49

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00544 Published 2025-07-16 Fixed in 9.18 CWE-287

TI-2025-25017 CVE-2025-37105 · GHSA-xhf7-73h5-3689

MEDIUM 44

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00744 Published 2025-07-16 Fixed in 9.18 CWE-94