HPESBNW04806 rev.1 - HPE Telco Service Orchestrator, Remote Unauthorized Access Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Arbitrary File Creation, Unauthorized Remote Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v4.2.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBNW04770 rev.2 - HPE Telco Service Orchestrator, Remote Unauthorized Data Injection Vulnerabilities

Potential Security Impact: Remote: Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.2.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-52798 |...

HPESBNW04768 rev.2 - HPE Telco Service Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Cross-Site Request Forgery CSRF, Denial of Service DoS, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.1.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04217 rev.2 - HPE Telco Service Orchestrator SO, Apache Log4j 2 Remote Arbitrary Code Execution and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - 3.7.1 - Closed Loop snmp adapter CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228...

Hardcoded credentials

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

Contrail Service Orchestration: hardcoded cryptographic certificates and keys

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

CVE-2018-0040

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

CVE-2018-0040

CVE-2018-0040 affects Juniper Networks Contrail Service Orchestrator prior to 4.0.0, where hard-coded cryptographic certificates and keys are used. Root cause: the presence of hard-coded credentials may allow an attacker to gain unauthorized access to services over the network. Consequences: unau...

CVE-2018-0040 Contrail Service Orchestration: hardcoded cryptographic certificates and keys

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...