Hp Business Availability Center vulnerabilities

6 known vulnerabilities affecting hp/business_availability_center.

Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM6

Vulnerabilities

Page 1 of 1
CVE-2012-3255MEDIUMCVSS 4.3v8.072012-09-08
CVE-2012-3255 [MEDIUM] CWE-79 CVE-2012-3255: Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2012-3256MEDIUMCVSS 6.8v8.072012-09-08
CVE-2012-3256 [MEDIUM] CWE-352 CVE-2012-3256: Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
nvd
CVE-2012-3257MEDIUMCVSS 4.6v8.072012-09-08
CVE-2012-3257 [MEDIUM] CVE-2012-3257: HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors.
nvd
CVE-2012-0132MEDIUMCVSS 4.3v9.012012-04-05
CVE-2012-0132 [MEDIUM] CWE-79 CVE-2012-0132: Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2011-1856MEDIUMCVSS 4.3≤ 8.06v7.0+7 more2011-05-16
CVE-2011-1856 [MEDIUM] CWE-79 CVE-2011-1856: Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier a Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2011-0274MEDIUMCVSS 4.3v7.0v7.55+2 more2011-01-24
CVE-2011-0274 [MEDIUM] CWE-79 CVE-2011-0274: Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 a Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd