{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T22:38:04.597","vulnerabilities":[{"cve":{"id":"CVE-2018-6494","sourceIdentifier":"security@opentext.com","published":"2018-05-22T18:29:00.280","lastModified":"2026-06-17T02:01:54.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Dolibarr en versiones anteriores a la 7.0.2 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro sortfield en /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php o /admin/website.php."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"Micro Focus","product":"HP Service Manager Software","versions":[{"version":"9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV30":[{"source":"security@opentext.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.30:*:*:*:*:*:*:*","matchCriteriaId":"1D57D0FD-8C39-4FBE-9FFF-CA64AB46EB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.31:*:*:*:*:*:*:*","matchCriteriaId":"CAA92971-1EDA-4DE5-B39F-F47E48CA18A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.32:*:*:*:*:*:*:*","matchCriteriaId":"9946A3FE-95BC-4956-A30F-7342735544C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.33:*:*:*:*:*:*:*","matchCriteriaId":"59CBE599-6A78-46D0-B849-2C4D559765FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.34:*:*:*:*:*:*:*","matchCriteriaId":"27319CF5-AB47-4AC6-83B7-3D54E614D4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.35:*:*:*:*:*:*:*","matchCriteriaId":"BB17FF7C-BED0-4F75-8222-1491C5DB74A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.40:*:*:*:*:*:*:*","matchCriteriaId":"605746BD-70F7-4F35-ABB9-2A3A3475254C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.41:*:*:*:*:*:*:*","matchCriteriaId":"6B647A2C-46B2-4BE3-9361-C7C276404D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.50:*:*:*:*:*:*:*","matchCriteriaId":"06C07728-DD28-4DA1-8BB4-0C8580F341A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:service_manager:9.51:*:*:*:*:*:*:*","matchCriteriaId":"FF34890E-CF4B-47A5-A051-0E4253E943F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104141","source":"security@opentext.com"},{"url":"http://www.securitytracker.com/id/1040902","source":"security@opentext.com"},{"url":"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158656","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/104141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1040902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}