CVE-2018-6492: MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

Security readout for executives and security teams

This flaw affects legacy Micro Focus/HP network management products. A remote attacker could get malicious script or HTML displayed to a user, including stored content in some cases. Impact is limited but meaningful: user interaction is required, yet a successful attack could expose or alter data seen by that user's session. Exposure is most likely in organizations still operating the listed legacy Network Operations Management Ultimate or Network Automation versions. Risk rises if management web interfaces are reachable beyond tightly controlled administrator networks or if users regularly view untrusted content through those consoles. Handle as a moderate legacy-platform risk. It is not documented as actively exploited, but affected systems manage network operations, so compromise of administrator-facing sessions could create operational and security exposure. Prioritize based on internet or broad internal reachability. Mitigation focus: Inventory deployments for the listed NOM Ultimate and Network Automation versions.; Consult Micro Focus vendor advisory KM03158014 for supported fixes or mitigation guidance.; Restrict management web interfaces to trusted administrative networks or VPN access..

Prepared

Jun 1, 2026, 12:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.