CVE-2025-37111

CVE-2025-37111 affects the HPE Telco Network Function Virtual Orchestrator. The issue is a vulnerability in the storage policy for certain sets of authentication keys, enabling unauthorized parties to gain access to sensitive system information. The CVSSv3.1 vector indicates Local attack vector, ...

CVE-2025-37110

CVE-2025-37110 affects HPE Telco Network Function Virtual Orchestrator. The vulnerability arises from how sensitive credential information is stored in the system database due to the storage policy, enabling unauthorized access to sensitive system information if exploited. The CVSS metrics indica...

CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109

CVE-2025-37109 describes a cross-site scripting vulnerability in the HPE Telco Service Activator product. The NVD entry lists a LOW base score (CVSS 3.1: 3.5, vectors: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) with a network attack vector, requiring user interaction for exploitation and a partial impa...

CVE-2025-37108

CVE-2025-37108 describes a Cross-site scripting vulnerability in HPE Telco Service Activator. Affected component: HPE Telco Service Activator (web interface). Underlying cause: cross-site scripting vulnerability as indicated by multiple sources; exact code path not detailed in the provided docs. ...

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

PT-2025-31579 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of encryption keys. Successful exploitation could lead to unauthorized access to...

PT-2025-31578 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of authentication keys. Successful exploitation could lead to unauthorized access to...

HPE Telco Network Function Virtual Orchestrator 安全漏洞

HPE Telco Network Function Virtual Orchestrator is an orchestration and management software for the virtualization of telecom network functions from HPE, USA. A security vulnerability exists in HPE Telco Network Function Virtual Orchestrator that stems from an improper authentication key storage...

PT-2025-31575 · Hewlett Packard · Hpe Telco Service Activator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue has been reported in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version...

PT-2025-31577 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of sensitive credential information. Successful exploitation could lead to unauthorized...

PT-2025-31576 · Hewlett Packard · Hpe Telco Service Activator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue exists in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version that contai...

HPE Telco Service Activator 安全漏洞

HPE Telco Service Activator is a workflow automation platform that enables automated service turn-up from HPE America. A security vulnerability exists in HPE Telco Service Activator that stems from vulnerability to cross-site scripting attacks...

HPE Telco Network Function Virtual Orchestrator 安全漏洞

HPE Telco Network Function Virtual Orchestrator is an orchestration and management software for the virtualization of telecom network functions from HPE, USA. A security vulnerability exists in HPE Telco Network Function Virtual Orchestrator that stems from improper storage policies for sensitive...

HPESBNW04905 rev. 1 - HPE Telco Intelligent Assurance, Improper Access Control in Java Dependency

Potential Security Impact: Local: Gain Unauthorized Access; Remote: Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance FAS and PDO 4.2.9 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-48734 |...

HPESBNW04902 rev.1 - HPE Telco Service Orchestrator, Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Potential Security Impact: Remote: Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v4.2.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-38153 |...