Unscored severity · published Oct 28, 2010
CVE-2010-3994
Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
HP · HP
version_control_repository_manager · source: NVD
VC
Version Control Repository Manager · HP
through 6.1.2; 1.0.1288.1; 1.0.2241.0; 1.0.2289.0; 1.0.2345.0; 1.0.3085.0; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3994
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3994
Vendor Advisory
http://marc.info/?l=bugtraq&m=128811016023086&w=2
osvdb.org
http://osvdb.org/68907
Vendor Advisory
http://secunia.com/advisories/41998
securitytracker.com
http://securitytracker.com/id?1024644
www.securityfocus.com
http://www.securityfocus.com/bid/44431