7.7
Élevée
CVE-2025-37100 A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to…
Description
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking Private 5G Core 1.24 | 1.24.1.0 → 1.25.1.0 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking Private 5G Core
Les 5 CVE de HPE Aruba Networking Private 5G Core →
CVE-2026-23598
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Moyenne
CVE-2026-23597
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Moyenne
CVE-2026-23596
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to…
6.5
Moyenne
CVE-2026-23595
An authentication bypass in the application API allows an unauthorized administrative account to be created
8.8
Élevée