CVE-2010-1036

HP System Insight Manager (HP SIM) before 6.0 contains CVE-2010-1036, a remote XSS that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The HP security bulletin HPSBMA02525 recommends upgrading to HP SIM 6.0 or later; CVSS v2 base score is cited as 6.8 (AV:N/AC:M/Au:...