{"affected":[{"affectedData":[{"product":"Business Process Monitor","vendor":"Hewlett Packard Enterprise","versions":[{"status":"affected","version":"v09.2x, v09.30"}]}],"source":"security-alert@hpe.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.20:*:*:*:*:*:*:*","matchCriteriaId":"8FE835A0-4BC2-4265-954A-386C611DDC6D","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.21:*:*:*:*:*:*:*","matchCriteriaId":"08D3CD2E-F21C-43A7-93DE-46D397BAFEB7","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.22:*:*:*:*:*:*:*","matchCriteriaId":"52CD20C3-DBFC-4827-A5EA-152119EE5D2E","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.23:*:*:*:*:*:*:*","matchCriteriaId":"DA1EEBEA-2BE8-4368-8E53-206D0111715B","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.24:*:*:*:*:*:*:*","matchCriteriaId":"28D20B41-9CB4-4BC7-AD8F-B1A193AB8857","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.25:*:*:*:*:*:*:*","matchCriteriaId":"178D9A6F-109A-48E7-A386-891EBF8E14C5","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.26:*:*:*:*:*:*:*","matchCriteriaId":"A75AD0E6-6362-4434-A62B-CCAA8C60F7B0","vulnerable":true},{"criteria":"cpe:2.3:a:hp:business_process_monitor:09.30:*:*:*:*:*:*:*","matchCriteriaId":"5AE3B77C-450C-4FE3-A137-241FF148434D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found."},{"lang":"es","value":"Se ha encontrado una vulnerabilidad de acceso remoto no autorizado a datos en HPE Business Process Monitor v09.2x y v09.30."}],"id":"CVE-2017-5801","lastModified":"2026-06-17T01:21:12.717","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-02-15T22:29:06.200","references":[{"source":"security-alert@hpe.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97386"},{"source":"security-alert@hpe.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038176"},{"source":"security-alert@hpe.com","tags":["Vendor Advisory"],"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97386"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038176"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us"}],"sourceIdentifier":"security-alert@hpe.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}