Lucene search
+L

110 matches found

CVE
CVE
added 2025/07/31 7:42 p.m.14 views

CVE-2025-37112

The CVE concerns HPE Telco Network Function Virtual Orchestrator. A vulnerability in the storage policy for certain encryption-key sets could allow unauthorized parties to access sensitive system information. The issue is described across multiple sources as affecting the storage policy for encry...

6CVSS6.3AI score0.00085EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/31 7:41 p.m.3 views

CVE-2025-37111 Hard-Coded Authentication Keys found in System

A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

6CVSS6.5AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/31 7:41 p.m.11 views

CVE-2025-37111 Hard-Coded Authentication Keys found in System

A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

6CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/31 7:41 p.m.19 views

CVE-2025-37111

CVE-2025-37111 affects the HPE Telco Network Function Virtual Orchestrator. The issue is a vulnerability in the storage policy for certain sets of authentication keys, enabling unauthorized parties to gain access to sensitive system information. The CVSSv3.1 vector indicates Local attack vector, ...

6CVSS6.5AI score0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/31 7:41 p.m.6 views

CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

6CVSS6.2AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/31 7:41 p.m.10 views

CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

6CVSS0.00136EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/31 7:41 p.m.21 views

CVE-2025-37110

CVE-2025-37110 affects HPE Telco Network Function Virtual Orchestrator. The vulnerability arises from how sensitive credential information is stored in the system database due to the storage policy, enabling unauthorized access to sensitive system information if exploited. The CVSS metrics indica...

6CVSS6.2AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/31 7:20 p.m.10 views

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

3.5CVSS0.00192EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/31 7:20 p.m.2 views

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

3.5CVSS6.2AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/31 7:20 p.m.21 views

CVE-2025-37109

CVE-2025-37109 describes a cross-site scripting vulnerability in the HPE Telco Service Activator product. The NVD entry lists a LOW base score (CVSS 3.1: 3.5, vectors: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) with a network attack vector, requiring user interaction for exploitation and a partial impa...

3.5CVSS6.2AI score0.00192EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/31 7:17 p.m.3 views

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

3.5CVSS6.2AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/31 7:17 p.m.12 views

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

3.5CVSS0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/31 7:17 p.m.26 views

CVE-2025-37108

CVE-2025-37108 describes a Cross-site scripting vulnerability in HPE Telco Service Activator. Affected component: HPE Telco Service Activator (web interface). Underlying cause: cross-site scripting vulnerability as indicated by multiple sources; exact code path not detailed in the provided docs. ...

3.5CVSS6.2AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.3 views

HPE Telco Service Activator 安全漏洞

HPE Telco Service Activator is a workflow automation platform that enables automated service turn-up from HPE America. A security vulnerability exists in HPE Telco Service Activator that stems from vulnerability to cross-site scripting attacks...

3.5CVSS6.1AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.4 views

PT-2025-31576 · Hewlett Packard · Hpe Telco Service Activator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue exists in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version that contai...

3.5CVSS5.8AI score0.00192EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.5 views

HPE Telco Network Function Virtual Orchestrator 安全漏洞

HPE Telco Network Function Virtual Orchestrator is an orchestration and management software for the virtualization of telecom network functions from HPE, USA. A security vulnerability exists in HPE Telco Network Function Virtual Orchestrator that stems from an improper authentication key storage...

6CVSS6.8AI score0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.12 views

PT-2025-31577 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of sensitive credential information. Successful exploitation could lead to unauthorized...

6CVSS6.6AI score0.00136EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.9 views

PT-2025-31578 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of authentication keys. Successful exploitation could lead to unauthorized access to...

6CVSS6.9AI score0.00148EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.12 views

PT-2025-31575 · Hewlett Packard · Hpe Telco Service Activator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue has been reported in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version...

3.5CVSS5.8AI score0.00192EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.7 views

PT-2025-31579 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of encryption keys. Successful exploitation could lead to unauthorized access to...

6CVSS6.6AI score0.00085EPSS
SaveExploits0References5
Rows per page
Query Builder