Lucene search

[email protected]CVE-2009-4185

HistoryFeb 05, 2010 - 10:30 p.m.

CVE-2009-4185

2010-02-0522:30:02

CWE-79

[email protected]

web.nvd.nist.gov

smh

xss

vulnerability

web script

html

servercert

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.

Affected configurations

NVD

Node

hpsystem_management_homepageRange≤3.0.2.77

hpsystem_management_homepageMatch2.0.0

hpsystem_management_homepageMatch2.0.1

hpsystem_management_homepageMatch2.0.2

hpsystem_management_homepageMatch2.1

hpsystem_management_homepageMatch2.1.0-103

hpsystem_management_homepageMatch2.1.0-103\(a\)

hpsystem_management_homepageMatch2.1.0-109

hpsystem_management_homepageMatch2.1.0-118

hpsystem_management_homepageMatch2.1.1

hpsystem_management_homepageMatch2.1.2

hpsystem_management_homepageMatch2.1.2-127

hpsystem_management_homepageMatch2.1.3

hpsystem_management_homepageMatch2.1.3.132

hpsystem_management_homepageMatch2.1.4

hpsystem_management_homepageMatch2.1.4-143

hpsystem_management_homepageMatch2.1.5

hpsystem_management_homepageMatch2.1.5-146

hpsystem_management_homepageMatch2.1.6

hpsystem_management_homepageMatch2.1.6-156

hpsystem_management_homepageMatch2.1.7

hpsystem_management_homepageMatch2.1.7-168

hpsystem_management_homepageMatch2.1.8

hpsystem_management_homepageMatch2.1.8-177

hpsystem_management_homepageMatch2.1.9

hpsystem_management_homepageMatch2.1.9-178

hpsystem_management_homepageMatch2.1.10

hpsystem_management_homepageMatch2.1.10-186

hpsystem_management_homepageMatch2.1.11

hpsystem_management_homepageMatch2.1.11-197

hpsystem_management_homepageMatch2.1.12-118

hpsystem_management_homepageMatch2.1.12-200

hpsystem_management_homepageMatch2.1.15-210

hpsystem_management_homepageMatch2.2.6

hpsystem_management_homepageMatch2.2.8

hpsystem_management_homepageMatch3.0.0-68

hpsystem_management_homepageMatch3.0.1.73

CPENameOperatorVersion
hp:system_management_homepagehp system management homepagele3.0.2.77
hp:system_management_homepagehp system management homepageeq2.0.0
hp:system_management_homepagehp system management homepageeq2.0.1
hp:system_management_homepagehp system management homepageeq2.0.2
hp:system_management_homepagehp system management homepageeq2.1
hp:system_management_homepagehp system management homepageeq2.1.0-103
hp:system_management_homepagehp system management homepageeq2.1.0-103\(a\)
hp:system_management_homepagehp system management homepageeq2.1.0-109
hp:system_management_homepagehp system management homepageeq2.1.0-118
hp:system_management_homepagehp system management homepageeq2.1.1

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	le	3.0.2.77
hp:system_management_homepage	hp system management homepage	eq	2.0.0
hp:system_management_homepage	hp system management homepage	eq	2.0.1
hp:system_management_homepage	hp system management homepage	eq	2.0.2
hp:system_management_homepage	hp system management homepage	eq	2.1
hp:system_management_homepage	hp system management homepage	eq	2.1.0-103
hp:system_management_homepage	hp system management homepage	eq	2.1.0-103\(a\)
hp:system_management_homepage	hp system management homepage	eq	2.1.0-109
hp:system_management_homepage	hp system management homepage	eq	2.1.0-118
hp:system_management_homepage	hp system management homepage	eq	2.1.1