What’s Vulnerable › Vulnerabilities

CVE-2018-7097

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-14 · updated 2026-06-17
• Weakness: CWE-352

Description

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.

Affected products

• Hewlett Packard Enterprise HPE 3PAR Service Processors: sp-4.2.0-ga, sp-4.3.0-ga-17, sp-4.3.0-ga-24, sp-4.4.0-ga-22, sp-4.4.0-ga-30, sp-4.4.0-ga-53 (+3)

References

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us

Get alerted when CVE-2018-7097 or the next vulnerability affects your stack