Lucene search

[email protected]CVE-2017-14354

HistoryOct 05, 2017 - 3:29 p.m.

CVE-2017-14354

2017-10-0515:29:00

CWE-79

[email protected]

web.nvd.nist.gov

ucmdb

foundation software

cross-site scripting

vulnerability

remote exploit

nvd

cve-2017-14354

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

51.3%

JSON

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting.

Affected configurations

NVD

Node

hpucmdb_foundation_softwareMatch10.10

hpucmdb_foundation_softwareMatch10.11

hpucmdb_foundation_softwareMatch10.20

hpucmdb_foundation_softwareMatch10.21

hpucmdb_foundation_softwareMatch10.22

hpucmdb_foundation_softwareMatch10.30

hpucmdb_foundation_softwareMatch10.31

hpucmdb_foundation_softwareMatch10.32

hpucmdb_foundation_softwareMatch10.33

CPENameOperatorVersion
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.10
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.11
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.20
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.21
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.22
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.30
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.31
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.32
hp:ucmdb_foundation_softwarehp ucmdb foundation softwareeq10.33

CPE	Name	Operator	Version
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.10
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.11
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.20
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.21
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.22
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.30
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.31
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.32
hp:ucmdb_foundation_software	hp ucmdb foundation software	eq	10.33

References

www.securityfocus.com/bid/101254

softwaresupport.hpe.com/km/KM02977984

www.auscert.org.au/bulletins/53150

www.tenable.com/security/research/tra-2017-32

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

51.3%

JSON

Related for CVE-2017-14354

cvelist1 prion1 nvd1 openvas1