PT-2025-31577 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

Published

2025-07-31

·

Updated

2025-07-31

·

CVE-2025-37110

CVSS v3.1
6.0
VectorAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions:

HPE Telco Network Function Virtual Orchestrator (affected versions not specified)

Description:

A vulnerability exists in the storage policy for certain sets of sensitive credential information. Successful exploitation could lead to unauthorized access to sensitive system information.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

Related Identifiers

CVE-2025-37110

Affected Products

Hpe Telco Network Function Virtual Orchestrator