98013vdb entry
http://www.securityfocus.com/bid/98013 CVE-2017-5798
MEDIUM
HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
Record summary
CVE-2017-5798 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.
Description
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
OpenCall Media Platform (OCMP)Browse Hewlett Packard Enterprise / OpenCall Media Platform (OCMP) | CVE List | prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x) | affected |
Proofs of concept
1Catalogued exploits
ExploitDBHPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File InclusionExploitDB exploitby Paolo StagnoNot analyzed1 file
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-5798 support.hpe.comConfirmation
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us 41927exploit
https://www.exploit-db.com/exploits/41927