CVE-2018-6499
Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05, Service Virtualization (SV) with floating licenses using Any version using APLS older than 10.7, Unified Functional Testing (UFT) with floating licenses using Any version using APLS older than 10.7, Network Virtualization (NV) with floating licenses using Any version using APLS older than 10.7 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.
Published:Aug 30, 2018
Last Modified:Nov 21, 2024
EPS:Aug 30, 2018
EPSS Score:0.01553
CVSS Score:7.1
Affected Products
Vendor
Product
Action
Vendor
Microfocus
Product
Autopass License Server
Microfocus
Autopass License Server
Vendor
Microfocus
Product
Data Center Automation
Microfocus
Data Center Automation
Vendor
Microfocus
Product
Hybrid Cloud Management
Microfocus
Hybrid Cloud Management
Vendor
Microfocus
Product
Network Operations Management
Microfocus
Network Operations Management
Vendor
Microfocus
Product
Network Virtualization
Microfocus
Network Virtualization
Vendor
Microfocus
Product
Operations Bridge
Microfocus
Operations Bridge
Vendor
Microfocus
Product
Service Management Automation
Microfocus
Service Management Automation
Vendor
Microfocus
Product
Service Virtualization
Microfocus
Service Virtualization
Vendor
Microfocus
Product
Unified Functional Testing
Microfocus
Unified Functional Testing
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
