CVE-2025-37112

A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.

Score

CVSS 3.1 6.0 Medium

Status

Deferred - security-alert@hpe.com

Published

2025-07-31

Last modified

2025-07-31

Weaknesses

CWE-798

Affected products

• Hpe Telco Network Function Virtual Orchestrator (Hewlett Packard Enterprise)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us