CVE-2018-7107

2018-09-2718:00:00

hpe

www.cve.org

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

35.6%

JSON

A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege.

CNA Affected

[
  {
    "product": "HPE Device Entitlement Gateway (DEG)",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "v3.2.4, v3.3 and v3.3.1"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03889en_us