Lucene search

HpCVE-2011-1727

HistoryMay 03, 2011 - 8:55 p.m.

CVE-2011-1727

2011-05-0320:55:12

CWE-79

web.nvd.nist.gov

vulnerability

xss

hp sitescope

html injection

remote code execution

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an “HTML injection” issue.

Affected configurations

Nvd

Node

hpsitescopeMatch9.54

hpsitescopeMatch10.13

hpsitescopeMatch11.01

hpsitescopeMatch11.1

VendorProductVersionCPE
hpsitescope9.54cpe:2.3:a:hp:sitescope:9.54:*:*:*:*:*:*:*
hpsitescope10.13cpe:2.3:a:hp:sitescope:10.13:*:*:*:*:*:*:*
hpsitescope11.01cpe:2.3:a:hp:sitescope:11.01:*:*:*:*:*:*:*
hpsitescope11.1cpe:2.3:a:hp:sitescope:11.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	sitescope	9.54	cpe:2.3:a:hp:sitescope:9.54:::::::*
hp	sitescope	10.13	cpe:2.3:a:hp:sitescope:10.13:::::::*
hp	sitescope	11.01	cpe:2.3:a:hp:sitescope:11.01:::::::*
hp	sitescope	11.1	cpe:2.3:a:hp:sitescope:11.1:::::::*

References

marc.info/?l=bugtraq&m=130374351406700&w=2

osvdb.org/72061

secunia.com/advisories/44322

secunia.com/advisories/44354

securityreason.com/securityalert/8235

www.securityfocus.com/bid/47554

www.securitytracker.com/id?1025436

www.vupen.com/english/advisories/2011/1091

exchange.xforce.ibmcloud.com/vulnerabilities/67020

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Related for CVE-2011-1727