Home

CVE-2017-14352

Description

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.362

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 are affected in ucmdb_configuration_manager 10.23NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup7NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup6NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup5NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup4NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup3NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup2NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup1NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.21NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.20NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.11NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.10NCM
Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability (CVE-2017-14352)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234