MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities
CVE-2018-6494

6.4MEDIUM

Key Information:

Vendor

Micro Focus

Status
HP Service Manager Software
Vendor
CVE Published:
10 May 2018

Badges

👾 Exploit Exists

What is CVE-2018-6494?

Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data.

Affected Version(s)

HP Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51

References

https://softwaresupport.softwaregrp.com/document/-/facets...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/104141
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1040902
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.