CVE-2018-6499 - CVE House
Back to Database
Status published High CVE-2018-6499

Remote Code Execution in the following products Hybrid Cloud Management...

Vulnerability Description

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05, Service Virtualization (SV) with floating licenses using Any version using APLS older than 10.7, Unified Functional Testing (UFT) with floating licenses using Any version using APLS older than 10.7, Network Virtualization (NV) with floating licenses using Any version using APLS older than 10.7 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6499

Credits & Attribution

No credits recorded in the NVD database.

References

More from Micro Focus

View All →
CVE-2023-32265
Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.
High 7.1
CVE-2023-32263
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Low 2.6
CVE-2023-32262
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Medium 4.3
CVE-2023-32261
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Medium 4.2
CVE-2022-38758
XSS vulnerabilities in iManager
High 7.2

Affected Vendor

Micro Focus

View all reports →

Affected Software

Network Operations Management (NOM) Suite CDF, Service Management Automation Suite, Data Center Automation Containerized Suite, Operations Bridge Containerized Suite, Hybrid Cloud Management Containerized Suite, Network Virtualization (NV) with floating licenses, Unified Functional Testing (UFT) with floating licenses, Service Virtualization (SV) with floating licenses
Vulnerable Versions:
2017.11, 2018.02, 2018.05, 2017.01 until 2018.05, HCM2017.11, HCM2018.02, HCM2018.05, using Any version using APLS older than 10.7

Timeline

Official Publish: August 30th, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.