Unscored severity · published Jul 22, 2010
CVE-2010-1969
Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VC
Virtual Connect Enterprise Manager · HP
6.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1969
Vendor Advisory
http://secunia.com/advisories/40552
www.securitytracker.com
http://www.securitytracker.com/id?1024181
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1797
www11.itrc.hp.com
http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02283465&admit=109447626+1279054975923+28353475
More from Virtual Connect Enterprise Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
–
CVE-2010-3986
Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors