[security bulletin] HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting (XSS), Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02571464 Version: 1 HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting XSS, Arbitrary File Download NOTICE: The information in this Security Bulletin shou...

CVE-2010-4101

CVE-2010-4101 is an XSS vulnerability in HP Insight Recovery for Windows prior to v6.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, no confidentiality impact,...