CVEvulnerability
CVE-2011-0274
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• hp business availability center 7.0
• hp business availability center 7.55
• hp business availability center 8.0
• hp business availability center 8.05
• hp business service management 9.01
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=129562482815203&w=2 Vendor Advisory
- http://secunia.com/advisories/43014 Vendor Advisory
- http://secunia.com/advisories/43018 Vendor Advisory
- http://securitytracker.com/id?1024986 securitytracker.com
- http://www.securityfocus.com/bid/45944 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0188 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64846 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=129562482815203&w=2 Vendor Advisory
- http://secunia.com/advisories/43014 Vendor Advisory
- http://secunia.com/advisories/43018 Vendor Advisory
- http://securitytracker.com/id?1024986 securitytracker.com
- http://www.securityfocus.com/bid/45944 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0188 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64846 exchange.xforce.ibmcloud.com