CVEvulnerability
CVE-2013-6198
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• hp service manager 9.20
• hp service manager 9.21
• hp service manager web client 9.20
• hp service manager web client 9.21
• hp service manager web tier 9.20
• hp service manager web tier 9.21
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075 Vendor Advisory
- http://www.securitytracker.com/id/1029541 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89975 exchange.xforce.ibmcloud.com
- http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075 Vendor Advisory
- http://www.securitytracker.com/id/1029541 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89975 exchange.xforce.ibmcloud.com