Home

CVE-2017-8947

Description

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
63.8

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup7NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup6NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup5NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup4NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup3NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup2NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 ,CVE-2018-18593 are affected in ucmdb_configuration_manager 10.22-cup1NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.21NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.20NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.11NCM
Vulnerabilities CVE-2017-14351 ,CVE-2017-14352 ,CVE-2017-8947 are affected in ucmdb_configuration_manager 10.10NCM
Vulnerabilities CVE-2017-8947 are affected in ucmdb_configuration_manager 10.31NCM
Vulnerabilities CVE-2017-8947 are affected in ucmdb_configuration_manager 10.30NCM
Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability (CVE-2017-8947)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234