CVE-2025-37108

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 31, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-371093.5Cross-site scripting vulnerability has been identified in HPE Telco Service Activator productCVE-2025-37119.8The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unautheCVE-2025-371106.0A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function CVE-2025-371116.0A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual OrcheCVE-2025-371126.0A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual OrchestraCVE-2025-37127.5The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenCVE-2025-371226.1A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to cCVE-2025-371238.8A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attackCVE-2025-371248.6A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. SCVE-2025-371257.5A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker CVE-2025-371267.2A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated usersCVE-2025-371277.2A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote atta
CVE-2025-37108: Low severity, CVSS 3.5 | Vulnix