cbcvebase.
CVE-2016-2011
published 2016-05-07

CVE-2016-2011: Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to…

medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010.

Affected

18 ranges
VendorProductVersion rangeFixed in
drupalphpmailer_3rd_party_library
hackeronewebdriver-launcher_node_module0 – 0.1.3
hpnetwork_node_manager_i
hpnetwork_node_manager_i
hpnetwork_node_manager_i
hpnetwork_node_manager_i
hpnetwork_node_manager_i
hpnetwork_node_manager_i
msrcmicrosoft_excel_for_mac_2011
msrcmicrosoft_office_2010_service_pack_2
msrcmicrosoft_office_compatibility_pack_service_pack_3
msrcmicrosoft_office_web_apps_2010_service_pack_2
msrcmicrosoft_office_word_viewer
msrcmicrosoft_outlook_2016_for_mac
msrcmicrosoft_word_2007_service_pack_3
msrcmicrosoft_word_2010_service_pack_2
msrcmicrosoft_word_for_mac_2011
msrcword_automation_services_on_microsoft_sharepoint_server_2013_service_pack_1