ByteOS Network

NVD Vulnerability Details :

CVE-2007-5302

Modified

Source-cve@mitre.org

Published At-09 Oct, 2007 | 18:17

Updated At-29 Sep, 2017 | 01:29

Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

HP Inc.

>>hp-ux>>11.11

cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*

HP Inc.

>>hp-ux>>11.23

cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*

HP Inc.

>>hp-ux>>11.31

cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01183265	cve@mitre.org	N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01183597	cve@mitre.org	Patch
http://osvdb.org/37603	cve@mitre.org	N/A
http://secunia.com/advisories/27067	cve@mitre.org	Patch Vendor Advisory
http://www.securityfocus.com/bid/25953	cve@mitre.org	N/A
http://www.securitytracker.com/id?1018775	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/3387	cve@mitre.org	Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5773	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History