CVE-2025-37110

Published: Jul 31, 2025Modified: Jun 17, 2026Deferred

6.0

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploitability: 1.5 / Impact: 4.0

Source: security-alert@hpe.com (Secondary)

Description

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us

Source: security-alert@hpe.com

Timeline

No history available yet.