CVE-2013-2321: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5222: Exposure of Sensitive Information to an Unauthorized Actor

HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive information via unspecified vectors...