CVE-2012-2008

2012-05-0910:33:15

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-2008

cross-site scripting

xss

hp performance insight

networks

vulnerability

remote attackers

web script

html

nvd

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.6%

JSON

Cross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

hpperformance_insightMatch5.3

hpperformance_insightMatch5.41

hpperformance_insightMatch5.41.001

hpperformance_insightMatch5.41.002

CPENameOperatorVersion
hp:performance_insighthp performance insighteq5.3
hp:performance_insighthp performance insighteq5.41
hp:performance_insighthp performance insighteq5.41.001
hp:performance_insighthp performance insighteq5.41.002

CPE	Name	Operator	Version
hp:performance_insight	hp performance insight	eq	5.3
hp:performance_insight	hp performance insight	eq	5.41
hp:performance_insight	hp performance insight	eq	5.41.001
hp:performance_insight	hp performance insight	eq	5.41.002