CVE-2018-7071

MEDIUM

HPE Network Function Virtualization Director < 4.2.1 - Exposure of Sensitive Information via Remote Access

Title source: llm

Description

HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Director (NFVD) 4.2.1 prior to gui patch 3.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03853en_us

Scores

CVSS v3 4.3

EPSS 0.0027

EPSS Percentile 50.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

hp/network_function_virtualization_director 4.2.1 p1 (2 CPE variants)

hp/network_function_virtualization_director < 4.2.1

Published Aug 06, 2018

Tracked Since Feb 18, 2026