PT-2018-8485 · Hewlett Packard · Hpe Centralview Fraud Risk Management

Publicado 2018-08-06 · Atualizado 2018-10-05 · CVE-2017-8991

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HPE CentralView Fraud Risk Management versions prior to 6.1

Description A cross-site scripting (XSS) issue has been identified. This issue is resolved in HF16 for version 6.1 or subsequent versions.

Recommendations For versions prior to 6.1, update to version 6.1 or subsequent versions and apply HF16 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-8991

Produtos afetados

Hpe Centralview Fraud Risk Management

Referências · 3

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8991 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8991 · Nota de Segurança