CVE-2017-5798: hewlett packard enterprise opencall media platform (ocmp) Cross-site Scripting
Vulnerability summary
CVE-2017-5798 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in hewlett packard enterprise opencall media platform (ocmp). EPSS estimates a 7.99% chance of exploitation in the next 30 days, higher than 94.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-02-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
7.99%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
-2.37 pp
From 10.36% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundHPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Hewlett packard enterprise1 product
- opencall media platform (ocmp)prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x)
Hp1 product
- opencall_media_platform≥ 3.0.0, < 3.4.2 | ≥ 4.0.0, < 4.4.7
2 vendors · 2 products
References
3 links- support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_usX Refsource CONFIRMVendor Advisory