CVE-2013-2361

2022-10-0316:15:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-2361

cross-site scripting

xss

system management homepage

smh

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.6%

JSON

Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

hpsystem_management_homepageRange≤7.2

hpsystem_management_homepageMatch7.0

hpsystem_management_homepageMatch7.1

CPENameOperatorVersion
hp:system_management_homepagehp system management homepagele7.2
hp:system_management_homepagehp system management homepageeq7.0
hp:system_management_homepagehp system management homepageeq7.1

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	le	7.2
hp:system_management_homepage	hp system management homepage	eq	7.0
hp:system_management_homepage	hp system management homepage	eq	7.1