7.1
Élevée
CVE-2025-37104 A security vulnerability has been identified in HPE Telco Service Orchestrator software
Description
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Telco Service Orchestrator 5.2 | premières → < 5.2.1 | 5.2.1 |