CVE-2018-6492: hp network_automation Cross-site Scripting
Vulnerability summary
CVE-2018-6492 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in hp network_automation. EPSS estimates a 1.55% chance of exploitation in the next 30 days, higher than 74.7% of scored vulnerabilities.
Timeline
- 22-05-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA4.7MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:NDiffers
EPSS trend
Probability
1.55%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
0.00 pp
From 1.55% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Hp2 products
- network_automation10.00 | 10.10 | 10.11 | 10.20 | 10.30 | 10.40 | 10.50
- network_operations_management_ultimate2017.07 | 2017.11 | 2018.02
Micro focus2 products
- network automation10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50
- network operations management ultimate2017.07, 2017.11, 2018.02
2 vendors · 4 products
References
3 links- softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158014X Refsource CONFIRM