HPESBNW05058 rev.1 - HPE Telco Universal SLA Management, Multiple Vulnerabilities

🗓️ 22 May 2026 00:00:00Reported by hpeType

Telco Universal SLA Management has DoS and CRLF injection vulnerabilities; upgrade to version 4.6 patch 10 or later.

Reporter	Title	Published	Views	Family All 1004
Vulnrichment	CVE-2026-34478 Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility	10 Apr 202615:40	–	vulnrichment
Vulnrichment	CVE-2026-34480 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters	10 Apr 202615:42	–	vulnrichment
Wolfi	CVE-2026-34478 vulnerabilities	17 Apr 202620:00	–	wolfi
Wolfi	CVE-2026-34480 vulnerabilities	11 Apr 202620:47	–	wolfi
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI	26 May 202614:03	–	ibm
IBM Security Bulletins	Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences	7 Aug 202607:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j	31 Jul 202608:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses log4j-core-2.25.3.jar which is vulnerable to CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480	7 Jul 202613:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:42	–	ibm