CVE-2012-3255

HP BAC 8.07 on Windows/Solaris is affected by CVE-2012-3255 (XSS) which allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue is documented in HP security bulletin HPSBMU02811 and is associated with CVSS v2 base score 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). HP provi...

[security bulletin] HPSBMU02811 SSRT100937 rev.1 - HP Business Availability Center (BAC) Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), and Web Session Hijacking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03475750 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03475750 Version: 1 HPSBMU02811...