PT-2018-8485 · Hewlett Packard · Hpe Centralview Fraud Risk Management

Published 2018-08-06 · Updated 2018-10-05 · CVE-2017-8991

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HPE CentralView Fraud Risk Management versions prior to 6.1

Description A cross-site scripting (XSS) issue has been identified. This issue is resolved in HF16 for version 6.1 or subsequent versions.

Recommendations For versions prior to 6.1, update to version 6.1 or subsequent versions and apply HF16 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-8991

Affected Products

Hpe Centralview Fraud Risk Management

References · 3

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8991 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8991 · Security Note