First published: Wed May 09 2018(Updated: )
Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.
Credit: meissner@suse.de
Affected Software | Affected Version | How to fix |
---|---|---|
HP Network Operations Management Ultimate | =2017.07 | |
HP Network Operations Management Ultimate | =2017.11 | |
HP Network Operations Management Ultimate | =2018.02 | |
HP Network Automation | =10.00 | |
HP Network Automation | =10.10 | |
HP Network Automation | =10.11 | |
HP Network Automation | =10.20 | |
HP Network Automation | =10.30 | |
HP Network Automation | =10.40 | |
HP Network Automation | =10.50 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-6492 has a severity rating that indicates it could allow remote exploitation of the affected HP software.
To mitigate CVE-2018-6492, upgrade to the latest patched version of the affected HP Network Operations Management and HP Network Automation software.
CVE-2018-6492 could be exploited through persistent Cross-Site Scripting and non-persistent HTML Injection attacks.
CVE-2018-6492 affects HP Network Operations Management Ultimate versions 2017.07, 2017.11, 2018.02 and HP Network Automation versions 10.00 to 10.50.
The impact of CVE-2018-6492 includes the potential for attackers to execute malicious scripts on victims' browsers.