CVE-2018-6492: HP Network Automation

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.

Affected products

• HP Network Automation: version 10.00 only; version 10.10 only; version 10.11 only; version 10.20 only; version 10.30 only; version 10.40 only; …
• HP Network Operations Management Ultimate: version 2017.07 only; version 2017.11 only; version 2018.02 only

Published 2018-05-22. Last modified 2026-06-17.