CVE-2016-4392

CVE-2016-4392 matches a remote cross-site scripting vulnerability in HP Business Service Management (BSM) software versions 9.1x and 9.20–9.25IP1. The issue concerns an input handling/output encoding flaw that allows attacker-supplied script to run in a victim’s browser, potentially compromising ...