title: MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
description: Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.
problem types: Remote Cross-Site Scripting (XSS)
affected:
{
product: Network Operations Management Ultimate
vendor: Micro Focus
versions:
status: affected, version: 2017.07, 2017.11, 2018.02
}
{
product: Network Automation
vendor: Micro Focus
versions:
status: affected, version: 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.0
]
exploits: Remote Cross-Site Scripting (XSS)