CVE-2011-2401

HP SiteScope versions 9.x–11.x are affected by CVE-2011-2401 (session fixation). The vulnerability could allow remote attackers, with network access and no authentication, to hijack user sessions (CVSSv2 base score 9.0 per HP bulletin), via unspecified vectors. HP’s security bulletin HPSBMU02692 ...

CVE-2011-2400

HP SiteScope is affected by CVE-2011-2400: remote XSS in SiteScope 9.x, 10.x, and 11.x via unspecified vectors. The vulnerability is confirmed in multiple sources (NVD/NVD CVSS v2 base score 4.3; HP security bulletin HPSBMU02692/SSRT100581 rev.2 documents patches). Remediation guidance from the H...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

This host is running HP SiteScope and is prone to cross site scripting and HTML injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssvuln.nasl 6367 2017-06-19 07:11:34Z ckuersteiner $ HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities Authors: Sooraj KS...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to cross site scripting and HTML injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1726

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1727

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

CVE-2011-1726

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1727

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

Cross site scripting

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1726

HP SiteScope is vulnerable to cross-site scripting and HTML injection in versions 9.54, 10.13, 11.01, and 11.1 due to improper sanitization of user-supplied input in dynamically generated content. The CVE-2011-1726 entry notes unspecified vectors for the XSS, and CVSS v2 base score is 4.3 (Medium...

CVE-2011-1726

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1727

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

CVE-2011-1727

HP SiteScope contains a Cross-Site Scripting (XSS) and HTML Injection vulnerability tracked as CVE-2011-1727. Affected versions are SiteScope 9.54, 10.13, 11.01, and 11.1. The root cause is described inconsistently across sources; OpenVAS notes indicate failure to properly sanitize user-supplied ...

HP SiteScope XSS

There is a cross-site scripting vulnerability in this installation of HP SiteScope that may allow an attacker to execute arbitrary script code in the browser of an unsuspecting user. Such script code could steal authentication credentials and be used to launch other attacks. %NASLMINLEVEL 70300 C...

HP SiteScope Detection

The remote host is running HP SiteScope, an agentless network monitoring application. HP SiteScope was formerly known as Mercury SiteScope. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53621; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate"...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user- supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the contex...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context...

[security bulletin] HPSBMA02667 SSRT100464 rev.1 - HP SiteScope, Cross Site Scripting (XSS) and HTML Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Document ID: c02807712 Version: 1 HPSBMA02667 SSRT100464 rev.1 - HP SiteScope, Cross Site Scripting XSS and HTML Injection NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2011-04-21 Last Update...

HP SiteScope crossite scripting

Script injections with SNMP traps...

Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability

====================================================================== Secunia Research 20/10/2008 - HP SiteScope SNMP Trap Script Insertion - ====================================================================== Table of Contents Affected...