CVE-2017-8991: HP Centralview Fraud Risk Management

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.

Affected products

• HP Centralview Fraud Risk Management: before 6.1 (fixed in 6.1)

Published 2018-08-06. Last modified 2026-06-17.