Cross-Site Scripting Vulnerability in HP UCMDB Configuration Manager
CVE-2017-14352

6.1MEDIUM

Key Information:

Vendor
HP
Status
Ucmdb Configuration Manager
Vendor
CVE Published:
30 September 2017

Summary

A cross-site scripting vulnerability has been detected in various versions of HP UCMDB Configuration Manager. This flaw allows remote attackers to inject malicious scripts into web interfaces, potentially leading to unauthorized access to sensitive information and user sessions. It affects several versions including 10.10 through 10.23, posing a significant risk for users and organizations relying on this software for configuration management.

References

https://softwaresupport.hpe.com/km/KM02968622
x_refsource_CONFIRM
http://www.securityfocus.com/bid/101154
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.