CVE-2018-6492: MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6492?
CVE-2018-6492 has a severity rating that indicates it could allow remote exploitation of the affected HP software.
How do I fix CVE-2018-6492?
To mitigate CVE-2018-6492, upgrade to the latest patched version of the affected HP Network Operations Management and HP Network Automation software.
What types of attacks can exploit CVE-2018-6492?
CVE-2018-6492 could be exploited through persistent Cross-Site Scripting and non-persistent HTML Injection attacks.
Which versions are affected by CVE-2018-6492?
CVE-2018-6492 affects HP Network Operations Management Ultimate versions 2017.07, 2017.11, 2018.02 and HP Network Automation versions 10.00 to 10.50.
What is the impact of CVE-2018-6492?
The impact of CVE-2018-6492 includes the potential for attackers to execute malicious scripts on victims' browsers.