CVE-2011-2406

2011-08-1122:55:01

CWE-79

[email protected]

web.nvd.nist.gov

cve

2011

2406

cross-site scripting

xss

hp openview

performance insight

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.1%

JSON

Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

hpopenview_performance_insightMatch5.3

hpopenview_performance_insightMatch5.4

hpopenview_performance_insightMatch5.31

hpopenview_performance_insightMatch5.41

hpopenview_performance_insightMatch5.41.001

hpopenview_performance_insightMatch5.41.002

CPENameOperatorVersion
hp:openview_performance_insighthp openview performance insighteq5.3
hp:openview_performance_insighthp openview performance insighteq5.4
hp:openview_performance_insighthp openview performance insighteq5.31
hp:openview_performance_insighthp openview performance insighteq5.41
hp:openview_performance_insighthp openview performance insighteq5.41.001
hp:openview_performance_insighthp openview performance insighteq5.41.002

CPE	Name	Operator	Version
hp:openview_performance_insight	hp openview performance insight	eq	5.3
hp:openview_performance_insight	hp openview performance insight	eq	5.4
hp:openview_performance_insight	hp openview performance insight	eq	5.31
hp:openview_performance_insight	hp openview performance insight	eq	5.41
hp:openview_performance_insight	hp openview performance insight	eq	5.41.001
hp:openview_performance_insight	hp openview performance insight	eq	5.41.002