Vulnerability in Hewlett Packard Enterprise HPE Xp P9000 Command View Advanced Edition (Cvae)
CVE-2018-7077
A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could be exploited to allow local and remote unauthorized access to sensitive information.
EPSS: 0.024 (82.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Hewlett Packard Enterprise Hpe Xp P9000 Command View Advanced Edition (Cvae) — versions DevMgr 8.5.0-00 and prior to 8.6.0-00, CM 8.5.0-00 and prior to 8.6.0-00
- Hp Xp_p9000_configuration_manager
- Hp Xp_p9000_device_manager
References
- security-alert@hpe.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-7077?
- CVE-2018-7077 is a high-severity vulnerability in Hewlett Packard Enterprise HPE Xp P9000 Command View Advanced Edition (Cvae). CVSS score: 7.5/10. Published 2018-08-14.
- How severe is CVE-2018-7077?
- High severity. CVSS v3 base score is 7.5 out of 10.