A flaw in the Analytics and Location Engine allows an unauthenticated attacker to send specially crafted messages or intercept network traffic, bypassing authentication and exposing sensitive data. The exploit can also trigger a denial‑of‑service condition on the affected host, causing loss of availability for the analytics service. The CVSS score of 7.3 indicates a moderate to high severity for confidentiality, integrity, and availability risks.

The vulnerability affects Hewlett Packard Enterprise's Analytics and Location Engine (ALE) product. No specific version range is listed, so all deployed ALE installations should be treated as potentially vulnerable until a patch or update is applied.

The CVSS score of 7.3 rates the flaw as high severity, while the EPSS score is currently unknown and the issue is not listed in the CISA KEV catalog. The lack of authentication checks makes the attack vector convenient for remote attackers with network access to ALE; interception of traffic may also be used. Because any external user can craft input, the exploitation likelihood is significant for exposed deployments.