High severity · published Aug 6, 2018
CVE-2018-7069
HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1
7.5
CVSS
1.8%
EPSS
No
On KEV
Description
HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HC
HPE CentralView Fraud Risk Management · Hewlett Packard Enterprise
earlier than version CV 6.1 · source: vendor
CF
Centralview Fraud Risk Management · HP
before 6.1 · source: NVD
Affected product
HC
HPE CentralView Fraud Risk Management
Hewlett Packard Enterprise
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7069
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7069
Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us
More from HPE CentralView Fraud Risk Management
9.8
CVE-2017-8992
HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1
6.1
CVE-2018-7068
HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1
5.4
CVE-2017-8991
HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1
5.3
CVE-2018-7070
HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1