CVE-2018-7097
Description
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.896
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-88 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-86 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-58 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-53 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-30 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-22 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.3.0-ga-24 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.3.0-ga-17 | NCM |
| Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.2.0-ga | NCM |
| Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-7097) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234