XSS in Hp Openview_performance_insight

CVE-2011-2410

Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.006 (70.6th percentile) — read the EPSS interpretation.

Affected products

Hp Openview_performance_insight — versions 5.3, 5.4, 5.31
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

HPSBMU02695 (Vendor Advisory, x_refsource_HP, vendor-advisory)