Cross Site Scripting Vulnerability in HPE CentralView Fraud Risk Management
CVE-2017-8991

5.4MEDIUM

Key Information:

Vendor
HP
Status
HP Centralview Fraud Risk Management
Vendor
CVE Published:
6 August 2018

Summary

Hewlett Packard Enterprise has identified a cross site scripting (XSS) vulnerability within HPE CentralView Fraud Risk Management, affecting versions prior to 6.1. This vulnerability allows attackers to inject malicious scripts into the application, potentially compromising user data and session integrity. The issue has been resolved in HF16 for HPE CentralView version 6.1 and later. Users are encouraged to update to the latest version to mitigate security risks.

Affected Version(s)

HPE CentralView Fraud Risk Management CV 6.1

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.