Unscored severity · published Jan 24, 2011
CVE-2011-0274
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Business Availability Center · HP
7.0; 7.55; 8.0; 8.05 · source: NVD
BS
Business Service Management · HP
9.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0274
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0274
Vendor Advisory
http://marc.info/?l=bugtraq&m=129562482815203&w=2
Vendor Advisory
http://secunia.com/advisories/43014
Vendor Advisory
http://secunia.com/advisories/43018
securitytracker.com
http://securitytracker.com/id?1024986
www.securityfocus.com
http://www.securityfocus.com/bid/45944
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0188
More from Business Availability Center
–
CVE-2012-3257
HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors
–
CVE-2012-3256
Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via…
–
CVE-2012-3255
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVE-2012-0132
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVE-2011-1856
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified…