5652 matches found
CVE-2025-37109
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37110
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37111
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37112
A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
HPESBNW04907 rev.1 - HPE Telco Service Orchestrator Software, Remote Command Execution Vulnerability
Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.3.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-7783 |...
CVE-2025-37112
A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37111
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37109
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37110
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37108
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37112 Hard-Coded Encryption Keys found in System
A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37112
The CVE concerns HPE Telco Network Function Virtual Orchestrator. A vulnerability in the storage policy for certain encryption-key sets could allow unauthorized parties to access sensitive system information. The issue is described across multiple sources as affecting the storage policy for encry...
CVE-2025-37111 Hard-Coded Authentication Keys found in System
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37111 Hard-Coded Authentication Keys found in System
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37111
CVE-2025-37111 affects the HPE Telco Network Function Virtual Orchestrator. The issue is a vulnerability in the storage policy for certain sets of authentication keys, enabling unauthorized parties to gain access to sensitive system information. The CVSSv3.1 vector indicates Local attack vector, ...
CVE-2025-37110
CVE-2025-37110 affects HPE Telco Network Function Virtual Orchestrator. The vulnerability arises from how sensitive credential information is stored in the system database due to the storage policy, enabling unauthorized access to sensitive system information if exploited. The CVSS metrics indica...
CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...