CVE-2018-7098: HP 3par Service Provider

High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal.

Affected products

• HP 3par Service Provider: version sp-4.2.0 only; version sp-4.3.0 only; version sp-4.4.0 only

Published 2018-08-14. Last modified 2026-06-17.