CVE-2018-7109 HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM.

MediumCVSS 6.5 EPSS 1.0%

Published: 2018-09-27 21:00
Updated: 2026-06-17 05:02
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM.

Affected products

Product	Affected versions	Fixed in
HP Inc enhanced internet usage manager	= 9.0-fp1	No fix listed
Hewlett Packard Enterprise HPE enhanced Internet Usage Manager (eIUM)	= v9.0FP1	No fix listed

References

105422 third-party-advisory vdb-entry
support.hpe.com vendor-advisory

CVSS v3.0

6.5 Medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None

All scores (2)

v3.0 6.5 · nvd@nist.gov
v2.0 5.5 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.00% (percentile 63.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.