Boletines de Vulnerabilidades

CVE-2025-37104

   
Software afectado HP
 
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-37104