CVE-2018-11046

6.5 mediumEPSS 0.9%

Medium (6.5) in pivotal software operations manager. EPSS 0.9% chance of exploitation in the next 30 days.

Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches. An attacker with access to the NGINX processes and knowledge of how to exploit the unpatched vulnerabilities may be able to impact Operations Manager

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-06-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:operations_manager

References

http://www.securityfocus.com/bid/104545
https://pivotal.io/security/cve-2018-11046
http://www.securityfocus.com/bid/104545
https://pivotal.io/security/cve-2018-11046

Check your stack JSON