The vulnerability is an unauthenticated SQL injection flaw located in the PAPI protocol of the Hewlett Packard Enterprise AOS‑8 system. The official CVE description is missing; the details are inferred from the title and the referenced advisory. Attackers could craft malicious SQL statements sent to the PAPI endpoint, which are executed directly by the underlying database. If successfully used, the attacker could read, modify, or delete sensitive configuration or user data, leading to confidentiality and integrity violations.

Hewlett Packard Enterprise AOS‑8 deployments that expose the PAPI protocol are affected. Version information is not disclosed, so any installation implementing the vulnerable PAPI interface is at risk. The advisory does not list specific affected releases, implying that all current installations sharing the same protocol implementation are vulnerable.

The CVSS score of 9.8 classifies this subject as Critical, indicating a severe impact and a high likelihood of exploitation. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that it has not yet been publicly exploited. The attack vector is inferred to be Remote over network, relying on unauthenticated access to the PAPI endpoint.