CVE-2017-8993

MEDIUM

HPE Project and Portfolio Management 9.30-9.40 - Cross-Site Scripting

Title source: llm

A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found.

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Vendor Advisory x_refsource_confirm

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

CVSS v3 5.4

EPSS 0.0032

EPSS Percentile 55.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (4)

microfocus/project_and_portfolio_management 9.3.0

microfocus/project_and_portfolio_management 9.3.1

microfocus/project_and_portfolio_management 9.3.2

microfocus/project_and_portfolio_management 9.4.0

Published Feb 15, 2018

Tracked Since Feb 18, 2026