CVE-2025-37110mediumCWE-922

CVE-2025-37110: medium-severity vulnerability in Hewlett Packard Enterprise HPE Telco Network…

Sensitive Credential Information stored insecurely in System Database

Published

Follow this CVE+ Monitor HPE Telco Network Function Virtual Orchestrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6epss 0.2%
A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
Hewlett Packard Enterprise · HPE Telco Network Function Virtual Orchestrator
Related CVEs — Hewlett Packard Enterprise HPE Telco Network…

In the same product, most dangerous first.

CVE-2025-37111MEDIUMHard-Coded Authentication Keys found in SystemEPSS 0.2%CVE-2025-37112MEDIUMHard-Coded Encryption Keys found in SystemEPSS 0.1%