CVE-2011-2406

2011-08-1122:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2011

2406

cross-site scripting

xss

hp openview

performance insight

5.3 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

51.5%

JSON

Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
hp:openview_performance_insighthp openview performance insighteq5.41.002
hp:openview_performance_insighthp openview performance insighteq5.41.001
hp:openview_performance_insighthp openview performance insighteq5.41
hp:openview_performance_insighthp openview performance insighteq5.31
hp:openview_performance_insighthp openview performance insighteq5.4
hp:openview_performance_insighthp openview performance insighteq5.3

CPE	Name	Operator	Version
hp:openview_performance_insight	hp openview performance insight	eq	5.41.002
hp:openview_performance_insight	hp openview performance insight	eq	5.41.001
hp:openview_performance_insight	hp openview performance insight	eq	5.41
hp:openview_performance_insight	hp openview performance insight	eq	5.31
hp:openview_performance_insight	hp openview performance insight	eq	5.4
hp:openview_performance_insight	hp openview performance insight	eq	5.3