Hpe Nonstop Soap 4 0
Monthly
Memory corruption in HPE NonStop SOAP 4.0 can be triggered remotely by a crafted SOAP request, resulting in a crash that takes down the affected NonStop system or SOAP service. The vulnerability is network-reachable and requires no authentication or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), scoring 8.2 with the impact concentrated on availability (A:H) alongside a limited integrity effect (I:L) and no confidentiality exposure. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the realistic risk depends heavily on whether the SOAP listener is exposed beyond a restricted internal back-office network, making this a moderate-priority availability issue rather than a top-tier emergency.
Memory corruption in HPE NonStop SOAP 4.0 can be triggered remotely by a crafted SOAP request, resulting in a crash that takes down the affected NonStop system or SOAP service. The vulnerability is network-reachable and requires no authentication or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), scoring 8.2 with the impact concentrated on availability (A:H) alongside a limited integrity effect (I:L) and no confidentiality exposure. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the realistic risk depends heavily on whether the SOAP listener is exposed beyond a restricted internal back-office network, making this a moderate-priority availability issue rather than a top-tier emergency.