CVE-2007-5302 — Cross-site Scripting in HP Hp-ux

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
HP Hp-ux
Timeline
PublishedOct 9
Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDhp/hp-ux11.11, 11.23, 11.31+2

Patches

Patch: h20000.www2.hp.com ↗Patch: secunia.com ↗Patch: h20000.www2.hp.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fcx9-c8rh-3996: Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B↗2022-05-01
▶
CVEList
CVE-2007-5302: Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B↗2007-10-09
▶
CVE-2007-5302 — Cross-site Scripting in HP Hp-ux | cvebase