[2/5] HP OpenView Network Node Manager Unspecified Cross-Site Scripting
:A vulnerability has been reported in HP OpenView Network Node Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.The vulnerability is reported in versions 6.41, 7.01, and 7.51 running on HP-UX B.11.00, B.11.11, and B.11.23, Solaris, Windows NT, Windows 2000, Windows XP, and Linux.Solution:Apply patches. Please see the vendor’s advisory for details.http://support.openview.hp.com/patches/patch_index.jspProvided and/or discovered by:Reported by the vendor.Original Advisory:HPSBMA02283 SSRT071319:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01218087
Original post by manisha
Posted in Advisories - Exploits |
| [2/5] HP OpenView Network Node Manager Unspecified Cross-Site Scripting