CVE-2008-4411

2008-10-1320:00:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-4411

xss

hp system management homepage

smh

web script injection

html injection

remote attack

nvd

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.9%

JSON

Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663.

CPENameOperatorVersion
hp:system_management_homepagehp system management homepageeq2.1.9-178
hp:system_management_homepagehp system management homepageeq2.1.2-127
hp:system_management_homepagehp system management homepageeq2.1.11-197
hp:system_management_homepagehp system management homepageeq2.1.2
hp:system_management_homepagehp system management homepageeq2.1.6
hp:system_management_homepagehp system management homepageeq2.0.2
hp:system_management_homepagehp system management homepageeq2.1.8-177
hp:system_management_homepagehp system management homepageeq2.1.4-143
hp:system_management_homepagehp system management homepageeq2.1.0-103
hp:system_management_homepagehp system management homepageeq2.1.11

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	eq	2.1.9-178
hp:system_management_homepage	hp system management homepage	eq	2.1.2-127
hp:system_management_homepage	hp system management homepage	eq	2.1.11-197
hp:system_management_homepage	hp system management homepage	eq	2.1.2
hp:system_management_homepage	hp system management homepage	eq	2.1.6
hp:system_management_homepage	hp system management homepage	eq	2.0.2
hp:system_management_homepage	hp system management homepage	eq	2.1.8-177
hp:system_management_homepage	hp system management homepage	eq	2.1.4-143
hp:system_management_homepage	hp system management homepage	eq	2.1.0-103
hp:system_management_homepage	hp system management homepage	eq	2.1.11