Known vulnerabilities in Telco Service Orchestrator

Vendor: HPE
Software: Telco Service Orchestrator
Software CPE: cpe:2.3:a:hpe:telco_service_orchestrator:*:*:*:*:*:*:*:*
Website: https://www.hpe.com
Total vulnerabilities: 12
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Telco Service Orchestrator Telco Service Orchestrator is affected by 12 known vulnerabilities: 2 critical, 2 high, 7 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120607 - Stack-based buffer overflow
CVE-2025-68615		 CWE-121 Critical
No
No
 4.2.12 26.12.2025 SB20251226349
SB2026010785
SB2026011301
and 43 more
#VU113024 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-37104		 CWE-89 Medium
No
No
 5.2.1 17.07.2025 SB2025071766
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817		 CWE-918 High
Available
No
 5.3.3 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU107996 - Error Handling
CVE-2025-31650		 CWE-388 Medium
Available
No
 5.3.2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 5.3.2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 5.3.1 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 5.2.0 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 5.2.1 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 5.2.1 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 4.2.14 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 5.2.1 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 4.2.4 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more