VRDA Feed : Provides information for vulnerability impact analysis

VRDA Feed by

Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis

[ about VRDA Feed | JPCERT/CC ]

Vulnerability Analysis Result (Revision No : 1)

[ Download XML ]

CVE-2010-1036

systems_insight_manager: Cross-site scripting (XSS) vulnerability in HP Syst...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1036

Original

Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Translation (Show)

About This Analysis Information

Analysis Information Provider:

NIST NVD

First Published:

2010-04-28

Source Information Category:

Advisory, Alert

Last Updated:

2010-04-29

Affected Product Tags

cpe:/a:hp:systems_insight_manager

cpe:/a:hp:systems_insight_manager:2.5

cpe:/a:hp:systems_insight_manager:2.5.2.0

cpe:/a:hp:systems_insight_manager:4.0

cpe:/a:hp:systems_insight_manager:4.0:sp1

cpe:/a:hp:systems_insight_manager:4.1

cpe:/a:hp:systems_insight_manager:4.1:sp1

cpe:/a:hp:systems_insight_manager:4.2

cpe:/a:hp:systems_insight_manager:4.2:sp1

cpe:/a:hp:systems_insight_manager:4.2:sp2

cpe:/a:hp:systems_insight_manager:5.0

cpe:/a:hp:systems_insight_manager:5.0:sp1

cpe:/a:hp:systems_insight_manager:5.0:sp2

cpe:/a:hp:systems_insight_manager:5.0:sp3

cpe:/a:hp:systems_insight_manager:5.0:sp4

cpe:/a:hp:systems_insight_manager:5.0:sp5

cpe:/a:hp:systems_insight_manager:5.1

cpe:/a:hp:systems_insight_manager:5.2

cpe:/a:hp:systems_insight_manager:5.2:update_1 and previous versions

cpe:/a:hp:systems_insight_manager::sp1

Vulnerability Analysis Results

[Access Vector] ^[?]

Undefined^[?]

Local^[?]

Adjacent Network^[?]

Network^[?]

[Access Complexit] ^[?]

Undefined^[?]

High^[?]

Medium^[?]

Low^[?]

[Authentication] ^[?]

Undefined^[?]

Multiple^[?]

Single^[?]

None^[?]

[Confidentiality Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Integrity Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Availability Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

Alternatives

References

BID 39735

HP SSRT100083

HP HPSBMA02525

SECTRACK 1023927

SECUNIA 39645

Vulnerability Type Cross-Site Scripting (XSS) (CWE-79)