CVE-2018-6492

MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

State: Published
Severity: 4.7 Medium
Published: May 22, 2018
Updated: Sep 16, 2024
Reserved: Feb 1, 2018

Description

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.

Scores

CVSS	Score	Vector	Source
3.0	4.7 Medium	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N	microfocus

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Network Operations Management UltimateMicro Focus	2017.07, 2017.11, 2018.02Affected
Network AutomationMicro Focus	10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50Affected

References

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158014
1040900vdb-entry
104131vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.