Home

CVE-2025-5878

Description

Four potential security vulnerabilities had been identified in HPE Telco Service Orchestrator software. The vulnerabilities could be remotely exploited causing Unauthenticated Disclosure of Information, SQL Injection, Denial of Service (DoS), and Allocation of Resources Without Limits or Throttling.

Risk Information

Base Score
7.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.152

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 24.0.1Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 24.0.0Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.2.0.5Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.2.1.1Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.2.7Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 25.0.0Windows
CVE-2025-5878NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234