CVE-2011-2410

2011-08-1917:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-2410

xss

hp openview

performance insight

nvd

vulnerability

remote attackers

web script

html

injection

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.9%

JSON

Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
hp:openview_performance_insighthp openview performance insighteq5.41.002
hp:openview_performance_insighthp openview performance insighteq5.41.001
hp:openview_performance_insighthp openview performance insighteq5.41
hp:openview_performance_insighthp openview performance insighteq5.31
hp:openview_performance_insighthp openview performance insighteq5.4
hp:openview_performance_insighthp openview performance insighteq5.3

CPE	Name	Operator	Version
hp:openview_performance_insight	hp openview performance insight	eq	5.41.002
hp:openview_performance_insight	hp openview performance insight	eq	5.41.001
hp:openview_performance_insight	hp openview performance insight	eq	5.41
hp:openview_performance_insight	hp openview performance insight	eq	5.31
hp:openview_performance_insight	hp openview performance insight	eq	5.4
hp:openview_performance_insight	hp openview performance insight	eq	5.3