CVE-2017-14352: A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10...

Security readout for executives and security teams

HP UCMDB Configuration Manager versions 10.10 through 10.23 have a reported remotely exploitable cross-site scripting issue. For executives, the main concern is exposure of an administrative configuration platform and possible abuse of trusted user sessions. Public data does not provide severity scoring, exploit details, or confirmed active exploitation. Exposure is limited to organizations running the listed HP UCMDB Configuration Manager versions. Internet-facing or broadly reachable management interfaces would carry higher operational concern than tightly restricted internal deployments. Address on a normal-to-elevated vulnerability management track, escalating if the product is externally reachable or used by privileged administrators. Evidence does not support emergency treatment from active exploitation alone. Mitigation focus: Inventory HP UCMDB Configuration Manager versions in use.; Review HPE advisory KM02968622 for official remediation guidance.; Prioritize remediation for internet-facing or widely accessible instances..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.