CVE-2018-7114 in the critical feed json
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code e…
published 2018-12-03 7 y ago modified 2026-06-17 4 mo ago also EUVD-2018-18857
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 32.8%
- EPSS 32.8% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
Patch / fix
- hp intelligent_management_center 7.3
Exploit prediction
32.76% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Hewlett Packard Enterprise HPE Intelligent Management Center (IMC)
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
support.hpe.com
/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03906en_us
vendor-advisory
-
support.hpe.com
/hpsc/doc/public/display?docId=hpesbhf03906en_us
vendor-advisory
-
securitytracker.com
/id/1042182
vdb-entry, third-party-advisory
-
securityfocus.com
/bid/106211
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2018-7114
- NVD CVE-2018-7114
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.