CVE-2017-8992

HPE CentralView Fraud Risk Management is affected by CVE-2017-8992, a remote privilege escalation in versions earlier than CV 6.1. The vulnerability is addressed in HF16 for CV 6.1 or later. Connected sources (NVD, CNVD) describe an elevation-of-privilege condition that can be triggered remotely,...

CVE-2018-7070

The CVE-2018-7070 entry affects HPE CentralView Fraud Risk Management (older than CV 6.1). Root cause: remote information disclosure vulnerability. Impact: partial confidentiality loss via remote access vectors; no integrity/availability impact stated. Affected product versions: pre-6.1 CV; fixed...

CVE-2018-7068

CVE-2018-7068 is a remote HOST header attack affecting HPE CentralView Fraud Risk Management prior to version CV 6.1. The underlying issue is a HOST header handling vulnerability exposed in earlier builds. The affected line of exploitation is remote, and the issue is resolved in HF16 for HPE CV 6...

CVE-2018-7069

CVE-2018-7069 corresponds to a remote unauthenticated file-access vulnerability in HPE CentralView Fraud Risk Management versions earlier than CV 6.1. The issue allows unauthenticated remote access to files and is addressed in HF16 for HPE CV 6.1 or newer. Connected sources indicate the flaw affe...

CVE-2017-8991

The vulnerability CVE-2017-8991 affects HPE CentralView Fraud Risk Management versions earlier than 6.1. The issue is a cross-site scripting (XSS) flaw that could allow injection of arbitrary script in the web context. The fixed release is stated as HF16 for HPE CV 6.1 or a subsequent version . T...