CVE-2018-6494

Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data.

Score

CVSS 3.0 6.4 Medium

Status

Modified - security@opentext.com

Published

2018-05-22

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Hp Service Manager Software (Micro Focus)
• Service Manager (Microfocus)

References

• http://www.securityfocus.com/bid/104141
• http://www.securitytracker.com/id/1040902
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158656