[security bulletin] HPSBGN02951 rev.1 - HP Operations Orchestration, Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04041093 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04041093 Version: 1 HPSBGN02951 rev....

HP Operations Orchestration Central 9.06 Cross Site Scripting

Name: XSS in HP Operations Orchestration Central version 9.06 Systems Affected: HP Operations Orchestration version 9.06 Severity: High Vendor: Hewlett-Packard References: CVE-2013-6191, CVE-2013-6192, SSRT101342 Author: Bart Leppens Date: 20130919 I. BACKGROUND HP Operations Orchestration HP OO ...

CVE-2013-6191

HP Operations Orchestration (OO) before version 9 is vulnerable to Cross-Site Scripting (XSS) via unspecified vectors, enabling potential manipulation of web content. The issue is documented as CVE-2013-6191 and is addressed by HP with patch v9.07.0004. The cited bulletin notes XSS/CSRF risks for...