XSS in HP Insight Management Agents
CVE-2012-2005
Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.034 (87.6th percentile) — read the EPSS interpretation.
Affected products
- Hp Insight_management_agents — versions 6.30.0.0, 6.31.0.0, 6.40.0.0
- Microsoft Windows_2003_server
- Microsoft Windows_server_2003
- Microsoft Windows_server_2008
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_OSVDB, vdb-entry)