ByteOS

cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*

Product

Integrated Lights-Out

Default Status

affected

Versions

Affected

From Integrated Lights-Out 6 (iLO 6) before 1.20 (1.20)
From Integrated Lights-Out 5 (iLO 5) before 2.78 (2.78)
From Integrated Lights-Out 4 (iLO 4) before 2.82 (2.82)

Problem Types

Type	CWE ID	Description
CWE	CWE-79	CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Type: CWE

CWE ID: CWE-79

Description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

Version	Base score	Base severity	Vector
3.1	8.3	HIGH	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Version: 3.1

Base score: 8.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Impacts

CAPEC ID	Description
CAPEC-63	CAPEC-63 Cross-Site Scripting (XSS)

CAPEC ID: CAPEC-63

Description: CAPEC-63 Cross-Site Scripting (XSS)

References

Hyperlink	Resource
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us	N/A

Hyperlink: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us	x_transferred

Hyperlink: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security-alert@hpe.com

Published At:22 Mar, 2023 | 06:15

Updated At:24 Mar, 2023 | 20:20

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Secondary	3.1	8.3	HIGH	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Type: Primary

Version: 3.1

Base score: 5.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 8.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

CPE Matches

HP Inc.

>>integrated_lights-out_4>>Versions before 2.82(exclusive)

cpe:2.3:h:hpe:apollo_4200_gen9_server:-:*:*:*:*:*:*:*

>>apollo_4200_gen9_server>>-

cpe:2.3:h:hpe:apollo_r2000_chassis:-:*:*:*:*:*:*:*

>>apollo_r2000_chassis>>-

cpe:2.3:h:hpe:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*

>>proliant_bl420c_gen8_server>>-

cpe:2.3:h:hpe:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*

>>proliant_bl460c_gen8_server_blade>>-

cpe:2.3:h:hpe:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*

>>proliant_bl460c_gen9_server_blade>>-

cpe:2.3:h:hpe:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:*

>>proliant_bl465c_gen8_server_blade>>-

cpe:2.3:h:hpe:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:*

>>proliant_bl660c_gen8_server_blade>>-

cpe:2.3:h:hpe:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*

>>proliant_bl660c_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl120_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl160_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl160_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl180_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl20_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl320e_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*

>>proliant_dl320e_gen8_v2_server>>-

cpe:2.3:h:hpe:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl360_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl360e_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl360p_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl380_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl380e_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl380p_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl385p_gen8_\(amd\):-:*:*:*:*:*:*:*

>>proliant_dl385p_gen8_\(amd\)>>-

cpe:2.3:h:hpe:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl560_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl560_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*

>>proliant_dl580_gen8_server>>-

cpe:2.3:h:hpe:proliant_dl580_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl580_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl60_gen9_server>>-

cpe:2.3:h:hpe:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*

>>proliant_dl80_gen9_server>>-

cpe:2.3:h:hpe:proliant_microserver_gen8:-:*:*:*:*:*:*:*

>>proliant_microserver_gen8>>-

cpe:2.3:h:hpe:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*

>>proliant_ml110_gen9_server>>-

cpe:2.3:h:hpe:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*

>>proliant_ml30_gen9_server>>-

cpe:2.3:h:hpe:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*

>>proliant_ml310e_gen8_server>>-

cpe:2.3:h:hpe:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*

>>proliant_ml310e_gen8_v2_server>>-

cpe:2.3:h:hpe:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*

>>proliant_ml350_gen9_server>>-

cpe:2.3:h:hpe:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:*

>>proliant_ml350e_gen8_server>>-

cpe:2.3:h:hpe:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*

>>proliant_ml350e_gen8_v2_server>>-

cpe:2.3:h:hpe:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*

>>proliant_ml350p_gen8_server>>-

cpe:2.3:h:hpe:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*

>>proliant_sl210t_gen8_server>>-

cpe:2.3:h:hpe:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:*

>>proliant_sl230s_gen8_server>>-

cpe:2.3:h:hpe:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*

>>proliant_sl250s_gen8_server>>-

cpe:2.3:h:hpe:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:*

>>proliant_sl270s_gen8_se_server>>-

cpe:2.3:h:hpe:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*

>>proliant_sl270s_gen8_server>>-

cpe:2.3:h:hpe:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:*

>>proliant_ws460c_gen8_graphics_server_blade>>-

cpe:2.3:h:hpe:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:*

>>proliant_ws460c_gen9_graphics_server_blade>>-

cpe:2.3:h:hpe:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*

>>proliant_xl170r_gen9_server>>-

cpe:2.3:h:hpe:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*

>>proliant_xl190r_gen9_server>>-

cpe:2.3:h:hpe:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:*

>>proliant_xl220a_gen8_v2_server>>-

cpe:2.3:h:hpe:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*

>>proliant_xl230a_gen9_server>>-

cpe:2.3:h:hpe:proliant_xl230b_gen9_server:-:*:*:*:*:*:*:*

>>proliant_xl230b_gen9_server>>-

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov
CWE-79	Secondary	security-alert@hpe.com

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-79

Type: Secondary

Source: security-alert@hpe.com

References

Hyperlink	Source	Resource
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us	security-alert@hpe.com	Vendor Advisory

Hyperlink: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us

Source: security-alert@hpe.com

Resource:

Vendor Advisory

Similar CVEs

9018Records found

CVE-2021-39035

Matching Score-10

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.12% / 31.89%

7 Day CHG-0.09%

Published-16 Aug, 2022 | 18:45

Updated-16 Sep, 2024 | 18:38

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213965.

Product-sterling_b2b_integrator solaris linux_kernel hp-ux windows aix Sterling B2B Integrator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-3662

Matching Score-10

Assigner-HP Inc.

Product-futuresmart_5 futuresmart_4 HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender

Matching Score-10

Assigner-HP Inc.

CVSS Score-5.4||MEDIUM

EPSS-0.28% / 51.40%

7 Day CHG~0.00%

Published-29 Oct, 2021 | 11:32

Updated-03 Aug, 2024 | 17:01

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).

Vendor-n/a HP Inc.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-42029

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-4.8||MEDIUM

EPSS-0.06% / 18.40%

7 Day CHG~0.00%

Published-02 Nov, 2023 | 23:44

Updated-05 Sep, 2024 | 14:34

IBM CICS TX cross-site scripting

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc

Product-txseries_for_multiplatforms linux_kernel cics_tx hp-ux windows aix CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20562

Matching Score-10

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.71% / 71.44%

7 Day CHG~0.00%

Published-27 Jul, 2021 | 11:25

Updated-16 Sep, 2024 | 16:48

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199232.

Product-sterling_b2b_integrator solaris linux_kernel i hp-ux windows aix Sterling B2B Integrator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2022-34336

Matching Score-10

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.23% / 45.26%

7 Day CHG~0.00%

Published-13 Sep, 2022 | 20:45

Updated-17 Sep, 2024 | 02:52

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-7132

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.17% / 37.97%

7 Day CHG~0.00%

Published-23 Apr, 2020 | 17:47

Updated-04 Aug, 2024 | 09:18

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard Administrator. * OA 4.95 (Linux and Windows).

Vendor-n/a HP Inc.

Product-onboard_administrator HPE Onboard Administrator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-33846

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.08% / 23.25%

7 Day CHG~0.00%

Published-08 Jun, 2023 | 00:39

Updated-06 Jan, 2025 | 20:02

IBM CICS TX cross-site scripting

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 257100.

Vendor-HP Inc.IBM Corporation Linux Kernel Organization, Inc

Product-linux_kernel txseries_for_multiplatform cics_tx hp-ux aix CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-26283

Matching Score-10

Assigner-IBM Corporation

Vendor-Linux Kernel Organization, Inc Microsoft Corporation HP Inc.Oracle Corporation IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.10% / 28.22%

7 Day CHG~0.00%

Published-22 Mar, 2023 | 21:35

Updated-25 Feb, 2025 | 19:10

IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416.

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-4578

Matching Score-10

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.29% / 51.74%

7 Day CHG~0.00%

Published-10 Sep, 2020 | 16:50

Updated-16 Sep, 2024 | 17:37

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2019-11656

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.18% / 39.36%

7 Day CHG~0.00%

Published-04 Oct, 2019 | 19:16

Updated-04 Aug, 2024 | 23:03

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Vendor-n/a HP Inc.

Product-arcsight_logger ArcSight Logger.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2022-40750

Matching Score-10

Assigner-IBM Corporation

Vendor-Linux Kernel Organization, Inc Microsoft Corporation Oracle Corporation HP Inc.IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.22% / 45.11%

7 Day CHG~0.00%

Published-11 Nov, 2022 | 18:21

Updated-01 May, 2025 | 13:40

IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588.

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2024-41911

Matching Score-10

Assigner-HP Inc.

Matching Score-10

Assigner-HP Inc.

CVSS Score-5.4||MEDIUM

EPSS-0.13% / 33.34%

7 Day CHG~0.00%

Published-06 Aug, 2024 | 14:07

Updated-28 Oct, 2024 | 21:35

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation.

Vendor-HP Inc.

Product-poly_clariti_manager_firmware poly_clariti_manager Poly Clariti Manager

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-24627

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.34% / 56.18%

7 Day CHG~0.00%

Published-02 Oct, 2020 | 18:50

Updated-04 Aug, 2024 | 15:19

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3.

Vendor-n/a Hewlett Packard Enterprise (HPE)

Product-kvm_ip_console_switch_g2_firmware kvm_ip_console_switch_g2 HPE KVM IP Console Switches

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-30910

Matching Score-8

Matching Score-8

Product-msa_2060_storage_firmware msa_2060_storage msa_1060_storage msa_1060_storage_firmware msa_2062_storage msa_2062_storage_firmware HPE MSA Controller

CVSS Score-5.4||MEDIUM

EPSS-0.11% / 29.25%

7 Day CHG~0.00%

Published-09 Oct, 2023 | 15:04

Updated-19 Sep, 2024 | 13:50

HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests.

Vendor-Hewlett Packard Enterprise (HPE)

CWE ID-CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CVE-2021-20560

Matching Score-8

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.08% / 23.41%

7 Day CHG~0.00%

Published-26 Jul, 2021 | 12:10

Updated-16 Sep, 2024 | 16:33

IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 199229.

Product-solaris sterling_connect_direct_user_interface linux_kernel hp-ux windows aix Sterling Connect:Direct Browser User Interface

CWE ID-CWE-1021

Improper Restriction of Rendered UI Layers or Frames

CVE-2010-3291

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.84% / 73.79%

7 Day CHG~0.00%

Published-21 Oct, 2010 | 18:12

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP AssetCenter 5.0x through AC_5.03, and AssetManager 5.1x through AM_5.12 and 5.2x through AM_5.22, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-assetcenter assetmanager n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-3289

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.67% / 70.49%

7 Day CHG~0.00%

Published-22 Oct, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-3012

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.76% / 72.34%

7 Day CHG~0.00%

Published-17 Sep, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue was originally assigned CVE-2010-3010 due to a CNA error.

Vendor-n/a HP Inc.

Product-system_management_homepage n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-3003

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.57% / 67.62%

7 Day CHG~0.00%

Published-10 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-insight_diagnostics n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2016-4399

Matching Score-6

Matching Score-6

CVSS Score-5.4||MEDIUM

EPSS-0.27% / 50.34%

7 Day CHG-0.04%

Published-06 Aug, 2018 | 20:00

Updated-06 Aug, 2024 | 00:25

A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).

Product-network_node_manager_i HP Network Node Manager (NNMi)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-1737

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.67% / 70.37%

7 Day CHG~0.00%

Published-13 May, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-palm_webos n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2016-4400

Matching Score-6

Matching Score-6

CVSS Score-5.4||MEDIUM

EPSS-0.31% / 53.47%

7 Day CHG-0.05%

Published-06 Aug, 2018 | 20:00

Updated-06 Aug, 2024 | 00:25

A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).

Product-network_node_manager_i HP Network Node Manager (NNMi)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-2402

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.67% / 70.44%

7 Day CHG~0.00%

Published-01 Aug, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-network_automation n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-1856

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.70% / 71.07%

7 Day CHG~0.00%

Published-16 May, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-business_availability_center n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-1557

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.60% / 68.32%

7 Day CHG~0.00%

Published-14 May, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-insight_control_server_migration_for_windows n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-1727

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-1.07% / 76.84%

7 Day CHG~0.00%

Published-03 May, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.

Vendor-n/a HP Inc.

Product-sitescope n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-1969

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.95% / 75.42%

7 Day CHG~0.00%

Published-22 Jul, 2010 | 01:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows virtual_connect_enterprise_manager n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-0770

Matching Score-6

Assigner-CERT/CC

Product-windows_event_log_smartconnector arcsight_c1000_appliance arcsight_c5200_appliance arcsight_c3200_appliance arcsight_c5400_appliance arcsight_c1300_appliance arcsight_c3400_appliance n/a

Matching Score-6

Assigner-CERT/CC

CVSS Score-4.3||MEDIUM

EPSS-1.33% / 79.11%

7 Day CHG~0.00%

Published-19 Jul, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.

Vendor-n/a HP Inc.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-0893

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.84% / 73.79%

7 Day CHG~0.00%

Published-03 Apr, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-operations n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-0449

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.65% / 69.74%

7 Day CHG-0.21%

Published-31 Mar, 2010 | 17:35

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Vendor-n/a HP Inc.

Product-soa_registry_foundation n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2018-7075

Matching Score-6

Matching Score-6

CVSS Score-6.1||MEDIUM

EPSS-0.45% / 62.85%

7 Day CHG~0.00%

Published-06 Aug, 2018 | 20:00

Updated-05 Aug, 2024 | 06:17

A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version.

Product-intelligent_management_center HPE Intelligent Management Center (IMC)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-0898

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.93% / 75.12%

7 Day CHG~0.00%

Published-15 Apr, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-network_node_manager_i n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-0280

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.67% / 70.49%

7 Day CHG~0.00%

Published-14 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents/exportlogs.asp, (2) the Id parameter to Contents/pagehelp.asp, or the (3) SORTORD or (4) SORTCOL parameter to Contents/applicationlogs.asp. NOTE: some of these details are obtained from third party information.

Vendor-n/a HP Inc.

Product-power_manager n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2016-2010

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.23% / 45.59%

7 Day CHG~0.00%

Published-07 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011.

Vendor-n/a HP Inc.

Product-network_node_manager_i n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2011-0274

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.85% / 73.96%

7 Day CHG~0.00%

Published-24 Jan, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-business_service_management business_availability_center n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2018-7117

Matching Score-6

Matching Score-6

CVSS Score-6.1||MEDIUM

EPSS-0.99% / 75.93%

7 Day CHG~0.00%

Published-09 Apr, 2019 | 18:28

Updated-05 Aug, 2024 | 06:17

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2018-6492

Matching Score-6

Matching Score-6

Product-network_operations_management_ultimate network_automation Network Automation Network Operations Management Ultimate

CVSS Score-4.7||MEDIUM

EPSS-0.43% / 61.43%

7 Day CHG~0.00%

Published-22 May, 2018 | 19:00

Updated-16 Sep, 2024 | 23:40

MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.

Vendor-Micro Focus International Limited HP Inc.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-3985

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.85% / 73.96%

7 Day CHG~0.00%

Published-26 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.Microsoft Corporation

Product-operations_orchestration internet_explorer n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-4030

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.84% / 73.79%

7 Day CHG~0.00%

Published-01 Nov, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-insight_control_performance_management n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-3987

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.62% / 69.19%

7 Day CHG~0.00%

Published-28 Oct, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-insight_control_virtual_machine_management n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2009-4185

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.64% / 69.71%

7 Day CHG~0.00%

Published-05 Feb, 2010 | 22:13

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.

Vendor-n/a HP Inc.

Product-system_management_homepage n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-4111

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.61% / 68.92%

7 Day CHG~0.00%

Published-22 Dec, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-linux_kernel windows insight_diagnostics n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-3010

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.60% / 68.32%

7 Day CHG~0.00%

Published-15 Sep, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage (SMH) was originally assigned CVE-2010-3010 due to a CNA error, but CVE-2010-3012 is the appropriate identifier for the SMH issue.

Vendor-n/a HP Inc.

Product-3com_officeconnect_gigabit_vpn_firewall_software 3crevf100-73 n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-1963

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.60% / 68.32%

7 Day CHG~0.00%

Published-07 Jun, 2010 | 14:00

Updated-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-servicecenter n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2018-6502

Matching Score-6

Matching Score-6

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 51.84%

7 Day CHG~0.00%

Published-20 Sep, 2018 | 19:00

Updated-17 Sep, 2024 | 04:19

MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS).

Vendor-Micro Focus International Limited HP Inc.

Product-arcsight_management_center ArcSight Management Center

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2018-7090

Matching Score-6

Matching Score-6

CVSS Score-6.1||MEDIUM

EPSS-0.45% / 62.85%

7 Day CHG~0.00%

Published-06 Aug, 2018 | 20:00

Updated-05 Aug, 2024 | 06:17

HPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr.

Product-xp_9000_command_view HPE XP P9000 Command View Advanced Edition Software (CVAE) versions 7.0.0-00 to earlier than 8.60-00

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2009-2684

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-4.06% / 88.06%

7 Day CHG~0.00%

Published-13 Oct, 2009 | 10:00

Updated-07 Aug, 2024 | 05:59

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-0452

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.67% / 70.34%

7 Day CHG-0.09%

Published-29 Mar, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-hp-ux project_and_portfolio_management_center n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2009-1418

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.59% / 68.29%

7 Day CHG~0.00%

Published-19 May, 2009 | 19:00

Updated-07 Aug, 2024 | 05:13

Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor-n/a HP Inc.

Product-system_management_homepage n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2010-1036

Matching Score-6

Assigner-HP Inc.