title: MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
description: SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.
problem types: SQL Injection
affected:
{
product: Network Operations Management Ultimate
vendor: Micro Focus
versions:
status: affected, version: 2017.07, 2017.11, 2018.02
}
{
product: Network Automation
vendor: Micro Focus
versions:
status: affected, version: 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
version: 3.0
]
exploits: SQL Injection