CVEvulnerability

CVE-2018-6493

8.8 HIGH Published 2018-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.7 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-89

Description

SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.

Affected configurations

• hp network operations management ultimate 2017.07 • hp network operations management ultimate 2017.11 • hp network operations management ultimate 2018.02 • hp network automation 10.00 • hp network automation 10.10 • hp network automation 10.11 • hp network automation 10.20 • hp network automation 10.30 • hp network automation 10.40 • hp network automation 10.50

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References