7.1
High
CVE-2025-37104 A security vulnerability has been identified in HPE Telco Service Orchestrator software
Description
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Telco Service Orchestrator 5.2 | earliest → < 5.2.1 | 5.2.1 |