CVE-2010-3289:systems_insight_manager: Cross-site scripting (XSS) vulnerability in HP Syst...

VRDA Feed by

Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis

[ about VRDA Feed | JPCERT/CC ]

Vulnerability Analysis Result (Revision No : 1)

[ Download XML ]

CVE-2010-3289

systems_insight_manager: Cross-site scripting (XSS) vulnerability in HP Syst...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-3289

Original

Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Translation (Show)

About This Analysis Information

Analysis Information Provider:

NIST NVD

First Published:

2010-10-23

Source Information Category:

Advisory, Alert

Last Updated:

2010-10-25

Affected Product Tags

cpe:/a:hp:systems_insight_manager:2.5

cpe:/a:hp:systems_insight_manager:2.5.2.0

cpe:/a:hp:systems_insight_manager:4.0

cpe:/a:hp:systems_insight_manager:4.0:sp1

cpe:/a:hp:systems_insight_manager:4.1

cpe:/a:hp:systems_insight_manager:4.1:sp1

cpe:/a:hp:systems_insight_manager:4.2

cpe:/a:hp:systems_insight_manager:4.2:sp1

cpe:/a:hp:systems_insight_manager:4.2:sp2

cpe:/a:hp:systems_insight_manager:5.0

cpe:/a:hp:systems_insight_manager:5.0:sp1

cpe:/a:hp:systems_insight_manager:5.0:sp2

cpe:/a:hp:systems_insight_manager:5.0:sp3

cpe:/a:hp:systems_insight_manager:5.0:sp4

cpe:/a:hp:systems_insight_manager:5.0:sp5

cpe:/a:hp:systems_insight_manager:5.1

cpe:/a:hp:systems_insight_manager:5.2

cpe:/a:hp:systems_insight_manager:5.2:update_1

cpe:/a:hp:systems_insight_manager:5.3

cpe:/a:hp:systems_insight_manager:5.3:update_1

cpe:/a:hp:systems_insight_manager:6.0

cpe:/a:hp:systems_insight_manager:6.1 and previous versions

cpe:/a:hp:systems_insight_manager::sp1

Vulnerability Analysis Results

[Access Vector] ^[?]

Undefined^[?]

Local^[?]

Adjacent Network^[?]

Network^[?]

[Access Complexit] ^[?]

Undefined^[?]

High^[?]

Medium^[?]

Low^[?]

[Authentication] ^[?]

Undefined^[?]

Multiple^[?]

Single^[?]

None^[?]

[Confidentiality Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Integrity Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Availability Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

Alternatives

References

HP SSRT100299

HP HPSBMA02591

Vulnerability Type Cross-Site Scripting (XSS) (CWE-79)