CVE-2011-1863

2011-06-1417:55:04

CWE-94

[email protected]

web.nvd.nist.gov

service manager

service center

remote code execution

cve-2011-1863

nvd

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:C/I:P/A:P

0.006 Low

EPSS

Percentile

77.6%

JSON

HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors.

Affected configurations

NVD

Node

hpservice_centerMatch6.2.8

hpservice_managerMatch7.02

hpservice_managerMatch7.11

hpservice_managerMatch9.20

hpservice_managerMatch9.21

CPENameOperatorVersion
hp:service_centerhp service centereq6.2.8
hp:service_managerhp service managereq7.02
hp:service_managerhp service managereq7.11
hp:service_managerhp service managereq9.20
hp:service_managerhp service managereq9.21

CPE	Name	Operator	Version
hp:service_center	hp service center	eq	6.2.8
hp:service_manager	hp service manager	eq	7.02
hp:service_manager	hp service manager	eq	7.11
hp:service_manager	hp service manager	eq	9.20
hp:service_manager	hp service manager	eq	9.21