VULNERABILITY INTELLIGENCE

CVE-2017-5799

CVSS score8.8 HIGH

EPSS probability15.23%

CISA KEVNot currently listed

Published2018-02-15

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).

Weakness classification

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Primary references

security-alert@hpe.com — Third Party Advisory, VDB Entry
security-alert@hpe.com — Vendor Advisory
security-alert@hpe.com — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry