4.3

CVE-2010-4111

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Insight Diagnostics Edition online Version <= 8.5.0.3625
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 6.3.0.878 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 6.3.1.887 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.0.0.1198 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.0.1.1219 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.4.0.1570 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.5.0.1679 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.5.5.1681 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.6.0.1984 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.7.0.2112 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.8.0.2257 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.9.0.2359 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 7.9.1.2401 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.0.0.2587 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.1.0.2718 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.1.1.2784 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.1.5.2890 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.2.0.3058 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.2.5.3157 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.3.0.3320 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version 8.4.0.3521 Edition online
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Edition online Version <= 8.5.0-11
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 6.3.0-15 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 6.3.1-1 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.0.0-30 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.0.1-8 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.4.0-11 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.5.0-14 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.5.5-1 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.6.0-23 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.7.0-142 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.8.0-159 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.9.0-105 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 7.9.1-15 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.0.0-210 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.1.0-136 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.1.1-206 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.1.5-311 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.3.0-14 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.3.1-105 Edition online
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version 8.4.0-18 Edition online
   Linux ≫ Linux Kernel
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.81% 0.757
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://marc.info/?l=bugtraq&m=129245189832672&w=2
Vendor Advisory
http://www.securitytracker.com/id?1024897