Lucene search

K
cve[email protected]CVE-2010-3994
HistoryOct 28, 2010 - 8:00 p.m.

CVE-2010-3994

2010-10-2820:00:03
CWE-79
web.nvd.nist.gov
21
cve-2010-3994
cross-site scripting
xss
hp version control repository manager
vcrm
vulnerability
remote attackers
web script
html.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
hphpMatchversion_control_repository_manager6.0
OR
hpversion_control_repository_managerRange6.1.2
OR
hpversion_control_repository_managerMatch1.0.1288.1
OR
hpversion_control_repository_managerMatch1.0.2241.0
OR
hpversion_control_repository_managerMatch1.0.2289.0
OR
hpversion_control_repository_managerMatch1.0.2345.0
OR
hpversion_control_repository_managerMatch1.0.3085.0
OR
hpversion_control_repository_managerMatch1.0.3086.0
OR
hpversion_control_repository_managerMatch2.0.0.50
OR
hpversion_control_repository_managerMatch2.0.1.30
OR
hpversion_control_repository_managerMatch2.1.1.710
OR
hpversion_control_repository_managerMatch2.1.1.720
OR
hpversion_control_repository_managerMatch6.0.1
OR
hpversion_control_repository_managerMatch6.0.2
OR
hpversion_control_repository_managerMatch6.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

Related for CVE-2010-3994