{"schemaVersion":3,"id":"CVE-2017-5799","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).","dates":{"published":"2018-02-15T22:00:00.000Z","modified":"2024-09-16T20:03:01.696Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.5,"severity":"medium","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.15233,"percentile":0.96753,"severity":"medium","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":2.7719999999999994,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.12461},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.12461,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.15233,"percentile":0.96753}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.12461,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.15233,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.15233,"percentile":0.96753}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"41927","name":"HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion","source":"exploit-database","url":"https://www.exploit-db.com/exploits/41927","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":null,"platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"webapps","platform":"multiple","file":"exploits/multiple/webapps/41927.txt","codes":["CVE-2017-5799","CVE-2017-5798"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-74","name":"Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')","description":"The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/74.html"}],"affected":[{"vendor":"hewlett packard enterprise","product":"opencall media platform (ocmp)","name":"OpenCall Media Platform (OCMP)","label":"opencall media platform (ocmp)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x)","noFixRecorded":false,"fixedIn":null}],"versionsText":"prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x)","eol":null,"hubHref":"/vendor/hewlett_packard_enterprise/opencall_media_platform_ocmp"},{"vendor":"hp","product":"opencall_media_platform","name":"opencall media platform","label":"opencall_media_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0, < 3.4.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0.0, < 4.4.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0, < 3.4.2 | ≥ 4.0.0, < 4.4.7","eol":null,"hubHref":"/vendor/hp/opencall_media_platform"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.exploit-db.com/exploits/41927/","label":"www.exploit-db.com/exploits/41927/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/98013","label":"www.securityfocus.com/bid/98013","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us","label":"support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us","hostname":"support.hpe.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-02-15T22:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T20:03:01.696Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":48,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:43:14.484Z","stale":false,"partial":false}}