Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-5781: Matrix Operating Environment can be tricked into unwanted actions

CVE-2017-5781 · published 8 years ago

Summary

The Matrix Operating Environment version 7.6 can be fooled into carrying out actions that a user did not intend, if the user visits a malicious web page. This could let an attacker change settings or perform other operations without proper permission. Install the latest security update from HPE or upgrade to a newer version to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
hp	matrix_operating_environment	7.6 `cpe:2.3:a:hp:matrix_operating_environment:7.6:::::::*`

Original advisory text

A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.

References

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-352Cross-Site Request Forgery (CSRF)

Timeline

Published15 Feb 2018

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2017-5781 · NVD

Track software like this

Free during beta