CVE-2017-14353 - A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution

Back Back to CVE browser

HIGH

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution

Published Oct 5, 2017

8.8

HIGH

CVSS 3.0

EPSS 4.72%

Description

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (5)

http://www.securityfocus.com/bid/101251
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-5856
Advisory
https://softwaresupport.hpe.com/km/KM02977984
x_refsource_CONFIRM
https://www.auscert.org.au/bulletins/53150
third-party-advisoryx_refsource_AUSCERT
https://www.tenable.com/security/research/tra-2017-32
x_refsource_MISC

Link	Providers	Tags
http://www.securityfocus.com/bid/101251		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-5856		Advisory
https://softwaresupport.hpe.com/km/KM02977984		x_refsource_CONFIRM
https://www.auscert.org.au/bulletins/53150		third-party-advisoryx_refsource_AUSCERT
https://www.tenable.com/security/research/tra-2017-32		x_refsource_MISC