« Volver al listado

CVE-2017-5801

Estado: ModificadaAlta (7.5)—

A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Business Process Monitor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-5801",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "Hewlett Packard Enterprise",
          "product": "Business Process Monitor",
          "versions": [
            {
              "status": "affected",
              "version": "v09.2x, v09.30"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-02-15T22:29:06.200",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/97386",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1038176",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/97386",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1038176",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found."
    },
    {
      "lang": "es",
      "value": "Se ha encontrado una vulnerabilidad de acceso remoto no autorizado a datos en HPE Business Process Monitor v09.2x y v09.30."
    }
  ],
  "lastModified": "2026-06-17T01:21:12.717",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FE835A0-4BC2-4265-954A-386C611DDC6D"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08D3CD2E-F21C-43A7-93DE-46D397BAFEB7"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52CD20C3-DBFC-4827-A5EA-152119EE5D2E"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA1EEBEA-2BE8-4368-8E53-206D0111715B"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28D20B41-9CB4-4BC7-AD8F-B1A193AB8857"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "178D9A6F-109A-48E7-A386-891EBF8E14C5"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A75AD0E6-6362-4434-A62B-CCAA8C60F7B0"
            },
            {
              "criteria": "cpe:2.3:a:hp:business_process_monitor:09.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AE3B77C-450C-4FE3-A137-241FF148434D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}