CVE-2011-2400

HP SiteScope is affected by CVE-2011-2400: remote XSS in SiteScope 9.x, 10.x, and 11.x via unspecified vectors. The vulnerability is confirmed in multiple sources (NVD/NVD CVSS v2 base score 4.3; HP security bulletin HPSBMU02692/SSRT100581 rev.2 documents patches). Remediation guidance from the H...

CVE-2011-2401

HP SiteScope versions 9.x–11.x are affected by CVE-2011-2401 (session fixation). The vulnerability could allow remote attackers, with network access and no authentication, to hijack user sessions (CVSSv2 base score 9.0 per HP bulletin), via unspecified vectors. HP’s security bulletin HPSBMU02692 ...

PT-2011-3828

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 9.x through 11.x Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For HP SiteScope versions 9.x through 11.x, update to a version that includes a...

PT-2011-3829

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 9.x through 11.x Description A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For HP SiteScope versions 9.x through 11.x,...

CVE-2011-2400: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2401: Undefined Security Weakness

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

This host is running HP SiteScope and is prone to cross site scripting and HTML injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssvuln.nasl 6367 2017-06-19 07:11:34Z ckuersteiner $ HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities Authors: Sooraj KS...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to cross site scripting and HTML injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1727

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

CVE-2011-1726

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1726

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1727

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

CVE-2011-1727

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

CVE-2011-1726

HP SiteScope is vulnerable to cross-site scripting and HTML injection in versions 9.54, 10.13, 11.01, and 11.1 due to improper sanitization of user-supplied input in dynamically generated content. The CVE-2011-1726 entry notes unspecified vectors for the XSS, and CVSS v2 base score is 4.3 (Medium...

CVE-2011-1726

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1727

HP SiteScope contains a Cross-Site Scripting (XSS) and HTML Injection vulnerability tracked as CVE-2011-1727. Affected versions are SiteScope 9.54, 10.13, 11.01, and 11.1. The root cause is described inconsistently across sources; OpenVAS notes indicate failure to properly sanitize user-supplied ...

PT-2011-3326

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 9.54 through 11.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For HP SiteScope versions 9.54 through 11.1, update to a version that contains...

CVE-2011-1727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

CVE-2011-1726: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...