A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients.

CVSS Details

CVSS 3.1 Base Score: 7.1
CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L)

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Prioritize with Active Threat Intelligence

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVE-2025-37104: Improper Neutralization of Special Elements used in an SQL Command

CVSS Details

Prioritize with Active Threat Intelligence