CVEvulnerability

CVE-2018-6492

6.1 MEDIUM Published 2018-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.7 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.

Affected configurations

• hp network operations management ultimate 2017.07 • hp network operations management ultimate 2017.11 • hp network operations management ultimate 2018.02 • hp network automation 10.00 • hp network automation 10.10 • hp network automation 10.11 • hp network automation 10.20 • hp network automation 10.30 • hp network automation 10.40 • hp network automation 10.50

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References