medium4.3
CVE-2010-3985
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbit…
Impact
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Operations Orchestration | through 7.5 Versions 7.1, 7.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02541822
- http://osvdb.org/68906
- http://secunia.com/advisories/41983
- http://www.securityfocus.com/bid/44331
- http://www.vupen.com/english/advisories/2010/2760
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62727
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02541822
- http://osvdb.org/68906
- http://secunia.com/advisories/41983
- http://www.securityfocus.com/bid/44331
- http://www.vupen.com/english/advisories/2010/2760
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62727