CVE-2018-7071

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Director (NFVD) 4.2.1 prior to gui patch 3.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	HPE Network Function Virtualization Director (NFVD)	NFVD 4.2.1 prior to gui patch 3

References

Timeline

Published: Aug 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-70729.8A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.CVE-2018-70735.5A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.CVE-2018-70749.8A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was res CVE-2018-70756.1A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The v CVE-2018-70769.8A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.CVE-2018-70777.5A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Config CVE-2018-70787.2A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iL CVE-2018-70797.2Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce aut CVE-2018-70807.5A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit CVE-2018-70819.8A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability t CVE-2018-70827.2A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary command CVE-2018-70837.5If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at t