Vulnerability Name:

CVE-2011-1542 (CCN-66968)

Assigned:2011-04-19
Published:2011-04-19
Updated:2011-09-22
Summary:Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2011-1542

Source: CCN
Type: HP Security Bulletin HPSBMA02663 SSRT100428 rev.1
HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Execution of Arbitrary Code, Denial of Service (DoS)

Source: HP
Type: Vendor Advisory
SSRT100428

Source: CCN
Type: SA44251
HP Systems Insight Manager Multiple Vulnerabilities

Source: SREASON
Type: UNKNOWN
8234

Source: CCN
Type: OSVDB ID: 73166
HP Systems Insight Manager Unspecified XSS

Source: BID
Type: UNKNOWN
47511

Source: CCN
Type: BID-47511
HP Systems Insight Manager CVE-2011-1542 Unspecified Cross Site Scripting Vulnerability

Source: SECTRACK
Type: UNKNOWN
1025415

Source: XF
Type: UNKNOWN
sim-unspec-xss(66968)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:hp:systems_insight_manager:2.5:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:2.5.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.0:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.0:sp1:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.1:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.1:sp1:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.2:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.2:sp1:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:4.2:sp2:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.0:sp1:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.0:sp2:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.0:sp3:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.0:sp4:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.0:sp5:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.1:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.2:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.2:update_1:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.3:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:5.3:update_1:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:*:*:*:*:*:*:*:* (Version <= 6.2)

    • Configuration CCN 1:
  • cpe:/a:hp:systems_insight_manager:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:hp:systems_insight_manager:6.1:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    hp systems insight manager 2.5
    hp systems insight manager 2.5.2.0
    hp systems insight manager 4.0
    hp systems insight manager 4.0 sp1
    hp systems insight manager 4.1
    hp systems insight manager 4.1 sp1
    hp systems insight manager 4.2
    hp systems insight manager 4.2 sp1
    hp systems insight manager 4.2 sp2
    hp systems insight manager 5.0
    hp systems insight manager 5.0 sp1
    hp systems insight manager 5.0 sp2
    hp systems insight manager 5.0 sp3
    hp systems insight manager 5.0 sp4
    hp systems insight manager 5.0 sp5
    hp systems insight manager 5.1
    hp systems insight manager 5.2
    hp systems insight manager 5.2 update_1
    hp systems insight manager 5.3
    hp systems insight manager 5.3 update_1
    hp systems insight manager 6.0
    hp systems insight manager 6.1
    hp systems insight manager *
    hp systems insight manager 6.0
    hp systems insight manager 6.1