4.3

CVE-2010-4111

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Insight Diagnostics Editiononline Version <= 8.5.0.3625
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version6.3.0.878 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version6.3.1.887 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.0.0.1198 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.0.1.1219 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.4.0.1570 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.5.0.1679 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.5.5.1681 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.6.0.1984 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.7.0.2112 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.8.0.2257 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.9.0.2359 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version7.9.1.2401 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.0.0.2587 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.1.0.2718 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.1.1.2784 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.1.5.2890 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.2.0.3058 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.2.5.3157 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.3.0.3320 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Version8.4.0.3521 Editiononline
   Microsoft ≫ Windows
Hp ≫ Insight Diagnostics Editiononline Version <= 8.5.0-11
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version6.3.0-15 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version6.3.1-1 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.0.0-30 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.0.1-8 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.4.0-11 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.5.0-14 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.5.5-1 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.6.0-23 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.7.0-142 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.8.0-159 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.9.0-105 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version7.9.1-15 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.0.0-210 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.1.0-136 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.1.1-206 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.1.5-311 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.3.0-14 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.3.1-105 Editiononline
   Linux ≫ Linux Kernel
Hp ≫ Insight Diagnostics Version8.4.0-18 Editiononline
   Linux ≫ Linux Kernel
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.48% 0.638
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.