{"id":"CVE-2017-5798","aliases":["EUVD-2017-14875","GHSA-2393-jxcj-6567"],"status":"published","title":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The...","description":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07993,"percentile":0.94801,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2018-02-15T22:00:00Z","modified":"2026-06-17T01:21:12Z","exploits":[{"source":"exploitdb","id":"EDB-41927","title":"HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion","type":"webapps","platform":"multiple","date":"2017-04-25","verified":true,"url":"https://www.exploit-db.com/exploits/41927"}],"products":[{"vendor":"hewlett packard enterprise","product":"opencall media platform (ocmp)"},{"vendor":"hp","product":"opencall_media_platform"}],"references":[{"url":"https://www.exploit-db.com/exploits/41927/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/98013","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5798"},{"url":"https://github.com/advisories/GHSA-2393-jxcj-6567"}],"sources":{"cve":[{"id":"CVE-2017-5798","description":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).","status":"published","published":"2018-02-15T22:00:00Z","modified":"2024-09-16T22:20:13.404Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2017-14875","description":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).","status":"published","published":"2018-02-15T22:00:00Z","modified":"2024-09-16T22:20:13Z","updated_at":"2026-11-03T00:55:03.975609Z"}],"ghsa":[{"id":"GHSA-2393-jxcj-6567","title":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The...","description":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).","status":"published","published":"2022-05-14T03:38:07Z","modified":"2023-02-02T05:08:15Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:52:42.475291Z"}],"nvd":[{"id":"CVE-2017-5798","description":"A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).","status":"published","published":"2018-02-15T22:29:06.027Z","modified":"2026-06-17T01:21:12.363Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:15.877386Z"}]}}