CVE-2010-4111

2010-12-2221:00:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2010-4111

cross-site scripting

xss

insight diagnostics

online edition

nvd

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.4%

JSON

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
hp:insight_diagnosticshp insight diagnosticsle8.5.0.3625
hp:insight_diagnosticshp insight diagnosticseq6.3.0.878
hp:insight_diagnosticshp insight diagnosticseq6.3.1.887
hp:insight_diagnosticshp insight diagnosticseq7.0.0.1198
hp:insight_diagnosticshp insight diagnosticseq7.0.1.1219
hp:insight_diagnosticshp insight diagnosticseq7.4.0.1570
hp:insight_diagnosticshp insight diagnosticseq7.5.0.1679
hp:insight_diagnosticshp insight diagnosticseq7.5.5.1681
hp:insight_diagnosticshp insight diagnosticseq7.6.0.1984
hp:insight_diagnosticshp insight diagnosticseq7.7.0.2112

CPE	Name	Operator	Version
hp:insight_diagnostics	hp insight diagnostics	le	8.5.0.3625
hp:insight_diagnostics	hp insight diagnostics	eq	6.3.0.878
hp:insight_diagnostics	hp insight diagnostics	eq	6.3.1.887
hp:insight_diagnostics	hp insight diagnostics	eq	7.0.0.1198
hp:insight_diagnostics	hp insight diagnostics	eq	7.0.1.1219
hp:insight_diagnostics	hp insight diagnostics	eq	7.4.0.1570
hp:insight_diagnostics	hp insight diagnostics	eq	7.5.0.1679
hp:insight_diagnostics	hp insight diagnostics	eq	7.5.5.1681
hp:insight_diagnostics	hp insight diagnostics	eq	7.6.0.1984
hp:insight_diagnostics	hp insight diagnostics	eq	7.7.0.2112