110 matches found
CVE-2025-37112
The CVE concerns HPE Telco Network Function Virtual Orchestrator. A vulnerability in the storage policy for certain encryption-key sets could allow unauthorized parties to access sensitive system information. The issue is described across multiple sources as affecting the storage policy for encry...
CVE-2025-37111 Hard-Coded Authentication Keys found in System
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37111 Hard-Coded Authentication Keys found in System
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37111
CVE-2025-37111 affects the HPE Telco Network Function Virtual Orchestrator. The issue is a vulnerability in the storage policy for certain sets of authentication keys, enabling unauthorized parties to gain access to sensitive system information. The CVSSv3.1 vector indicates Local attack vector, ...
CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...
CVE-2025-37110
CVE-2025-37110 affects HPE Telco Network Function Virtual Orchestrator. The vulnerability arises from how sensitive credential information is stored in the system database due to the storage policy, enabling unauthorized access to sensitive system information if exploited. The CVSS metrics indica...
CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37109
CVE-2025-37109 describes a cross-site scripting vulnerability in the HPE Telco Service Activator product. The NVD entry lists a LOW base score (CVSS 3.1: 3.5, vectors: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) with a network attack vector, requiring user interaction for exploitation and a partial impa...
CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...
CVE-2025-37108
CVE-2025-37108 describes a Cross-site scripting vulnerability in HPE Telco Service Activator. Affected component: HPE Telco Service Activator (web interface). Underlying cause: cross-site scripting vulnerability as indicated by multiple sources; exact code path not detailed in the provided docs. ...
HPE Telco Service Activator 安全漏洞
HPE Telco Service Activator is a workflow automation platform that enables automated service turn-up from HPE America. A security vulnerability exists in HPE Telco Service Activator that stems from vulnerability to cross-site scripting attacks...
PT-2025-31576 · Hewlett Packard · Hpe Telco Service Activator
Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue exists in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version that contai...
HPE Telco Network Function Virtual Orchestrator 安全漏洞
HPE Telco Network Function Virtual Orchestrator is an orchestration and management software for the virtualization of telecom network functions from HPE, USA. A security vulnerability exists in HPE Telco Network Function Virtual Orchestrator that stems from an improper authentication key storage...
PT-2025-31577 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator
Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of sensitive credential information. Successful exploitation could lead to unauthorized...
PT-2025-31578 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator
Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of authentication keys. Successful exploitation could lead to unauthorized access to...
PT-2025-31575 · Hewlett Packard · Hpe Telco Service Activator
Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue has been reported in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version...
PT-2025-31579 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator
Name of the Vulnerable Software and Affected Versions: HPE Telco Network Function Virtual Orchestrator affected versions not specified Description: A vulnerability exists in the storage policy for certain sets of encryption keys. Successful exploitation could lead to unauthorized access to...