Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-37110 EUVD-2025-23306GHSA-xxcm-4v4p-f9rr

Sensitive Credential Information stored insecurely in System Database

Published Jul 31, 2025 · Updated Jul 31, 2025 · Assigned by hpe

Description

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise HPE Telco Network Function Virtual Orchestrator 7.0.0 – ≤ 7.3.0 —

References