VULNERABILITY INTELLIGENCE
CVE-2018-7075
CVSS score6.1 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2018-08-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Primary references
- security-alert@hpe.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory