Search/CVE-2018-6498
● CVE — High

CVE-2018-6498

VendormicrofocusProductdata center automation, hybrid cloud management, network operations management, operations bridge, service management automationDiscoveredAug 30, 2018UpdatedNov 21, 2024

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

CVSS v3.1
8.8 HIGH
EPSS
3.13%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 23, 2026
● 0.00pp
3.13% → 3.13% over 9 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityHIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
Connections
6 relationships
Timeline
disclosure → media coverage
Aug 30, 2018
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024