CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microfocusCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
hpucmdb_foundation_software
10.10
hpucmdb_foundation_software
10.11
hpucmdb_foundation_software
10.20
hpucmdb_foundation_software
10.21
hpucmdb_foundation_software
10.22
hpucmdb_foundation_software
10.30
hpucmdb_foundation_software
10.31
hpucmdb_foundation_software
10.32
hpucmdb_foundation_software
10.33
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101251
https://softwaresupport.hpe.com/km/KM02977984
https://www.auscert.org.au/bulletins/53150
https://www.tenable.com/security/research/tra-2017-32
http://www.securityfocus.com/bid/101251
https://softwaresupport.hpe.com/km/KM02977984
https://www.auscert.org.au/bulletins/53150
https://www.tenable.com/security/research/tra-2017-32