CVE-2017-14353

EUVD-2017-5856
A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
hpucmdb_foundation_software
10.10
hpucmdb_foundation_software
10.11
hpucmdb_foundation_software
10.20
hpucmdb_foundation_software
10.21
hpucmdb_foundation_software
10.22
hpucmdb_foundation_software
10.30
hpucmdb_foundation_software
10.31
hpucmdb_foundation_software
10.32
hpucmdb_foundation_software
10.33
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101251
https://softwaresupport.hpe.com/km/KM02977984
https://www.auscert.org.au/bulletins/53150
https://www.tenable.com/security/research/tra-2017-32
http://www.securityfocus.com/bid/101251
https://softwaresupport.hpe.com/km/KM02977984
https://www.auscert.org.au/bulletins/53150
https://www.tenable.com/security/research/tra-2017-32