CVE-2012-3251

The CVE-2012-3251 issue concerns a Cross-site Scripting (XSS) vulnerability in HP Service Manager Web Tier (versions 7.11, 9.21, 9.30) and HP Service Center Web Tier 6.28. The problem allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Details across connected ...

CVE-2013-6198

HP Service Manager WebTier and Windows Client 9.20 and 9.21 are affected by CVE-2013-6198, a cross-site scripting (XSS) vulnerability with unspecified vectors that could allow remote injection of malicious script or HTML in the context of a logged-in user. Impact is partial integrity compromise t...

CVE-2013-6197

HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 are affected by CVE-2013-6197 (before 9.21.661 p8), enabling remote authenticated users to execute arbitrary code via unknown vectors. The HP advisory HPSBMU02959 rev.1 and related HP security bulletin summarize the vulnerabilit...

CVE-2012-5222

CVE-2012-5222 affects HP Service Manager Web Tier 9.31 before 9.31.2004 p2. It enables remote disclosure of information via unspecified vectors (confidentiality impact partial). HP security bulletin HPSBMU02872 (SSRT101185) documents this risk and assigns a CVSS v2 base score of 7.5 (AV:N/AC:L/Au...

CVE-2013-2321

HP Service Manager Web Tier (Windows) version 9.31 up to 9.31.2004 p2 contains a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is documented in HP Security Bulletin HPSBMU02872 rev.1 and CVE-201...