Known vulnerabilities in HP Network Automation

Vendor: Hewlett Packard Enterprise Development LP
Software: HP Network Automation
Software CPE: cpe:2.3:a:hewlett_packard_enterprise_development_lp:hp_network_automation:*:*:*:*:*:*:*:*
Website: https://www.hpe.com/us/en/home.html
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HP Network Automation HP Network Automation is affected by 10 known vulnerabilities: 3 high, 1 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-6492		 CWE-79 Low
No
No
 - 11.05.2018 SB2018051404
#VU12601 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-6493		 CWE-89 Low
No
No
 - 11.05.2018 SB2018051404
#VU6509 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5812		 CWE-200 Low
No
No
 - 10.05.2017 SB2017051015
#VU6508 - Improper input validation
CVE-2017-5811		 CWE-20 High
No
No
 - 10.05.2017 SB2017051015
#VU6507 - Authentication Bypass Issues
CVE-2017-5814		 CWE-592 Low
No
No
 - 10.05.2017 SB2017051015
#VU6506 - Improper Access Control
CVE-2017-5813		 CWE-284 Low
No
No
 - 10.05.2017 SB2017051015
#VU6505 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-5810		 CWE-89 High
No
No
 - 10.05.2017 SB2017051015
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2014-3566		 CWE-327 Medium
Available
No
 9.22.02, 10.00.01 20.01.2017 SB2014101601
SB2014102102
SB2016022401
and 78 more
#VU691 - Improper Access Control
CVE-2016-4386		 CWE-284 Low
No
No
 - 29.09.2016 SB2016092908
#VU592 - Improper Access Control
CVE-2016-4385		 CWE-284 High
No
No
 - 21.09.2016 SB2016092130