CVE-2011-4156
published 2011-11-16CVE-2011-4156: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.33%
81.7th percentile
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | network_node_manager_i | — | — |
| hp | network_node_manager_i | — | — |
| hp | network_node_manager_i | — | — |
| hp | network_node_manager_i | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5c4m-rfvv-rf9x: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9
ghsa_unreviewed·2022-05-17·CVSS 4.3
CVE-2011-4155 [MEDIUM] CWE-79 GHSA-5c4m-rfvv-rf9x: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156.
GHSA
GHSA-jx4q-78r9-gjf4: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9
ghsa_unreviewed·2022-05-17·CVSS 4.3
CVE-2011-4156 [MEDIUM] CWE-79 GHSA-jx4q-78r9-gjf4: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155.
GHSA
GHSA-r8j8-g8mg-2j28: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9
ghsa_unreviewed·2022-05-14·CVSS 4.3
CVE-2011-5184 [MEDIUM] CWE-79 GHSA-r8j8-g8mg-2j28: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) nodename parameter to nnm/protected/configurationpoll.jsp, (3) nnm/protected/ping.jsp, (4) nnm/protected/statuspoll.jsp, or (5) nnm/protected/traceroute.jsp; or (6) field parameter to nmm/validate. NOTE: this might be a duplicate of CVE-2011-4155 or CVE-2011-4156.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2011-11-16
Published