Lucene search

HpCVE-2015-5444

HistoryOct 18, 2015 - 10:59 a.m.

CVE-2015-5444

2015-10-1810:59:00

CWE-79

web.nvd.nist.gov

cve-2015-5444

cross-site scripting

xss

hp smart profile server

sps dal

remote attackers

web script injection

html injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

hpsmart_profile_server_data_analytics_layerMatch2.3

VendorProductVersionCPE
hpsmart_profile_server_data_analytics_layer2.3cpe:2.3:a:hp:smart_profile_server_data_analytics_layer:2.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	smart_profile_server_data_analytics_layer	2.3	cpe:2.3:a:hp:smart_profile_server_data_analytics_layer:2.3:::::::*

References

h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04845334

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

Related for CVE-2015-5444