The vulnerability is an authenticated server‑side request forgery in Hewlett Packard Enterprise AOS‑8, allowing an attacker with valid credentials to force the system to issue arbitrary HTTP requests to internal or external services. Because the request originates from privileged code, the attacker can potentially trigger remote code execution on backend services or processes. This weakness is consistent with a high‑severity SSRF that can lead to full system compromise. The SSRF nature of the vulnerability is inferred from the CVE title, as the title indicates an authenticated SSRF leading to remote code execution.

The affected system is Hewlett Packard Enterprise AOS‑8; the specific product name is not listed and affected versions are not disclosed in the available data.

The CVSS score of 8.7 indicates a high severity, and the EPSS score is not available, so the exploitation probability cannot be quantified from public data; the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is authenticated SSRF, requiring an attacker to obtain valid user credentials. If exploited, the attacker could achieve remote code execution on the server hosting AOS‑8 or on services contacted via the forged requests.