← Back

CVE-2018-6498

nvd nist
Published: Aug 30, 2018Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

Affected (22)

Microfocus
5 products
Data Center Automation
Hybrid Cloud Management
Network Operations Management
Operations Bridge
Service Management Automation
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Microfocus
Data Center Automation
Version 2017.01
Data Center Automation
Version 2017.05
Data Center Automation
Version 2017.08
Data Center Automation
Version 2017.09
Data Center Automation
Version 2017.11
Data Center Automation
Version 2018.02
Data Center Automation
Version 2018.05
Microfocus
Hybrid Cloud Management
Version 2017.11
Hybrid Cloud Management
Version 2017.11
Hybrid Cloud Management
Version 2018.02
Hybrid Cloud Management
Version 2018.02
Hybrid Cloud Management
Version 2018.05
Hybrid Cloud Management
Version 2018.05
Microfocus
Network Operations Management
Version 2017.11
Network Operations Management
Version 2018.02
Network Operations Management
Version 2018.05
Microfocus
Operations Bridge
Version 2017.11
Operations Bridge
Version 2018.02
Operations Bridge
Version 2018.05
Microfocus
Service Management Automation
Version 2017.11
Service Management Automation
Version 2018.02
Service Management Automation
Version 2018.05

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (10)

Source: security@opentext.com
Source: security@opentext.com
Source: security@opentext.com
Source: security@opentext.com
Source: security@opentext.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.