CVE-2017-8947

The CVE-2017-8947 entry concerns Hewlett Packard Enterprise Universal CMDB (UCMDB). Reports confirm a remote code execution vulnerability in UCMDB where the UploadFileOnUIServerServlet handles user-supplied paths insecurely, enabling arbitrary code execution. Affected product versions include UCM...

CVE-2017-14351

HP UCMDB Configuration Manager (versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23) is listed as affected by a vulnerability that could allow remote code execution. The provided sources state the possibility of remote exploitation but do not include concrete exploit details or remediation steps. T...

CVE-2017-14352

HP UCMDB Configuration Manager (HPE UCMDB) applications versions 10.10–10.23 are affected by a cross-site scripting vulnerability. The CVE-2017-14352 entry notes remote exploitation could allow script execution in a user’s browser. CVSSv3 vectors indicate NETWORK access, LOW attack complexity, PR...

CVE-2018-18593

CVE-2018-18593 affects HPE UCMDB Configuration Management Service and is a directory traversal vulnerability that could allow remote disclosure of privileged information. Publicly listed affected versions include UCMDB 10.22 (and CUP updates), 10.33, 2018.02/2018.05/2018.08/2018.11 timelines, and...