Lucene search

HpeCVE-2018-7075

HistoryAug 06, 2018 - 8:29 p.m.

CVE-2018-7075

2018-08-0620:29:02

CWE-79

hpe

web.nvd.nist.gov

cve-2018-7075

remote

xss

hpe

imc

plat

vulnerability

security

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

25.4%

JSON

A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version.

Affected configurations

Nvd

Node

hpintelligent_management_centerMatch7.3e0506

VendorProductVersionCPE
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0506:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:e0506::::::

CNA Affected

[
  {
    "product": "HPE Intelligent Management Center (IMC)",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "v7.3 (E0506)"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03863en_us

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

25.4%

JSON

Related for CVE-2018-7075