PT-2018-17585 · Hewlett Packard · Hp Service Manager Software Web Tier

Published 2018-05-22 · Updated 2020-07-06 · CVE-2018-6494

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP Service Manager Software Web Tier versions 9.30 through 9.51

Description The issue allows for Remote SQL Injection, which may result in unauthorized disclosure of data.

Recommendations For HP Service Manager Software Web Tier versions 9.30 through 9.51, update to a version that contains a fix for this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-6494

Affected Products

Hp Service Manager Software Web Tier

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-6494 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6494 · Vendor Advisory
• http://securitytracker.com/id/1040902 · Note
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158656 · Note
• http://securityfocus.com/bid/104141 · Note