Lucene search

MitreCVE-2016-4380

HistorySep 08, 2016 - 4:59 p.m.

CVE-2016-4380

2016-09-0816:59:03

CWE-79

mitre

web.nvd.nist.gov

cve-2016-4380

cross-site scripting

xss

hpe operations manager

security vulnerability

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

hpoperations_managerRange≤9.21linux

hpoperations_managerRange≤9.21solaris

hpoperations_managerRange≤9.21unix

VendorProductVersionCPE
hpoperations_manager*cpe:2.3:a:hp:operations_manager:*:*:*:*:*:linux:*:*
hpoperations_manager*cpe:2.3:a:hp:operations_manager:*:*:*:*:*:solaris:*:*
hpoperations_manager*cpe:2.3:a:hp:operations_manager:*:*:*:*:*:unix:*:*

Vendor	Product	Version	CPE
hp	operations_manager	*	cpe:2.3:a:hp:operations_manager::::::linux::*
hp	operations_manager	*	cpe:2.3:a:hp:operations_manager::::::solaris::*
hp	operations_manager	*	cpe:2.3:a:hp:operations_manager::::::unix::*

References

www.securityfocus.com/bid/92698

www.securitytracker.com/id/1036716

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249833

Social References

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Related for CVE-2016-4380