medium6.1Public exploit code
CVE-2017-5798
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion2017-04-25 · webapps · multiple · Verified
Impact
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Opencall Media Platform | from 3.0.0 before 3.4.2 from 4.0.0 before 4.4.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98013
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
- https://www.exploit-db.com/exploits/41927/
- http://www.securityfocus.com/bid/98013
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
- https://www.exploit-db.com/exploits/41927/