CVE-2025-37104 — HPE Telco Service Orchestrator Software, Authenticated SQL Injection
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack…
Published: 2025-07-16 · CVSS: 7.1 · CVSS 3.1
A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7