Security Advisory

CVE-2025-37104

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-16 14:17:49

Last updated 2025-07-18 14:52:06

Assigner hpe

CVSS score not scored

State PUBLISHED

Description

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients.

← Browse all CVEs View on cve.org ↗