CVE-2011-4156

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.3MEDIUM
EPSS
1.8%
top 17.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
HP Network Node Manager I
Timeline
PublishedNov 16
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDhp/network_node_manager_i4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-jx4q-78r9-gjf4: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9↗2022-05-17
▶
CVEList
CVE-2011-4156: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9↗2011-11-16
▶
CVE-2011-4156 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io