vulnwire
8.8high

CVE-2017-5799in critical feed1 exploit

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
15.2%
percentile 97%
Public exploits
1
Exploit-DB

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).

Exploit prediction (EPSS)

15.23% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-41927 HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion · webapps · 2017-04-25

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.06.5AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

  • Hewlett Packard Enterprise OpenCall Media Platform (OCMP)

Classification

Weakness
  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component

References

  • exploit-db.com /exploits/41927/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityfocus.com /bid/98013 · vdb-entry, x_refsource_BID, x_transferred
  • support.hpe.com /hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.