vulnwire
6.1med

CVE-2017-57981 exploit

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
6.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
8.0%
percentile 95%
Public exploits
1
Exploit-DB

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).

Exploit prediction (EPSS)

7.99% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-41927 HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion · webapps · 2017-04-25

CVSS scores

Assigned byVersionScoreVector
NVD3.06.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

  • Hewlett Packard Enterprise OpenCall Media Platform (OCMP)

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

  • exploit-db.com /exploits/41927/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityfocus.com /bid/98013 · vdb-entry, x_refsource_BID, x_transferred
  • support.hpe.com /hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.