CVEvulnerability
CVE-2010-3985
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-10-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• hp operations orchestration (<= 7.5)
• hp operations orchestration 7.1
• hp operations orchestration 7.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02541822 Vendor Advisory
- http://osvdb.org/68906 osvdb.org
- http://secunia.com/advisories/41983 secunia.com
- http://www.securityfocus.com/bid/44331 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2760 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62727 exchange.xforce.ibmcloud.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02541822 Vendor Advisory
- http://osvdb.org/68906 osvdb.org
- http://secunia.com/advisories/41983 secunia.com
- http://www.securityfocus.com/bid/44331 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2760 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62727 exchange.xforce.ibmcloud.com