CVE-2010-3994 — Cross-site Scripting in HP Version Control Repository Manager

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.7%
top 28.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
HP Version Control Repository ManagerHP
Timeline
PublishedOct 28
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDhp/hpversion_control_repository_manager

🔴Vulnerability Details

2
GHSA
GHSA-qxxh-x84q-2wqj: Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6↗2022-05-17
▶
CVEList
CVE-2010-3994: Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6↗2010-10-28
▶
CVE-2010-3994 — Cross-site Scripting in HP | cvebase