ByteOS Network

NVD Vulnerability Details :

CVE-2018-6493

Modified

Source-security@opentext.com

Published At-22 May, 2018 | 19:29

Updated At-07 Nov, 2023 | 02:59

SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.0	8.7	HIGH	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Primary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.0

Base score: 8.7

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Type: Primary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

HP Inc.

>>network_operations_management_ultimate>>2017.07

cpe:2.3:a:hp:network_operations_management_ultimate:2017.07:*:*:*:*:*:*:*

HP Inc.

>>network_operations_management_ultimate>>2017.11

cpe:2.3:a:hp:network_operations_management_ultimate:2017.11:*:*:*:*:*:*:*

HP Inc.

>>network_operations_management_ultimate>>2018.02

cpe:2.3:a:hp:network_operations_management_ultimate:2018.02:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.00

cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.10

cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.11

cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.20

cpe:2.3:a:hp:network_automation:10.20:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.30

cpe:2.3:a:hp:network_automation:10.30:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.40

cpe:2.3:a:hp:network_automation:10.40:*:*:*:*:*:*:*

HP Inc.

>>network_automation>>10.50

cpe:2.3:a:hp:network_automation:10.50:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	nvd@nist.gov

CWE ID: CWE-89

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/104131	security@opentext.com	N/A
http://www.securitytracker.com/id/1040900	security@opentext.com	N/A
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158014	security@opentext.com	N/A