Known vulnerabilities in Universal Configuration Management Database

Vendor: HPE
Software: Universal Configuration Management Database
Software CPE: cpe:2.3:a:hpe:universal_configuration_management_database:*:*:*:*:*:*:*:*
Website: https://www.hpe.com
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Universal Configuration Management Database Universal Configuration Management Database is affected by 8 known vulnerabilities: 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-6495		 CWE-79 Low
No
No
 - 24.05.2018 SB2018052502
#VU40649 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5440		 CWE-200 Medium
No
No
 - 16.09.2015 SB2015091602
SB2023032912
#VU40892 - Exposure of sensitive information to an unauthorized actor
CVE-2014-7883		 CWE-200 Medium
Available
No
 - 15.02.2015 SB2015021502
#VU41496 - Improper input validation
CVE-2014-2615		 CWE-20 Medium
No
No
 - 07.07.2014 SB2014041903
SB2014070203
#VU41497 - Improper input validation
CVE-2014-2616		 CWE-20 Medium
No
No
 - 07.07.2014 SB2014041903
SB2014070203
#VU41498 - Improper input validation
CVE-2014-2617		 CWE-20 High
No
No
 - 07.07.2014 SB2014041903
SB2014070203
#VU41783 - Improper input validation
CVE-2013-6215		 CWE-20 Medium
No
No
 - 20.04.2014 SB2014041903
SB2014041725
#VU41784 - Improper input validation
CVE-2013-6214		 CWE-20 Low
No
No
 - 19.04.2014 SB2014041903