Unscored severity · published Apr 29, 2011
CVE-2011-1542
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVSS
1.7%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Systems Insight Manager · HP
through 6.2; 2.5; 2.5.2.0; 4.0; 4.0; 4.1; +17 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1542
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1542
Vendor Advisory
http://marc.info/?l=bugtraq&m=130331642631603&w=2
securityreason.com
http://securityreason.com/securityalert/8234
www.securityfocus.com
http://www.securityfocus.com/bid/47511
www.securitytracker.com
http://www.securitytracker.com/id?1025415
More from Systems Insight Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
9.8
CVE-2020-7200
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6
9.8
CVE-2016-4366
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors
9.1
CVE-2016-2029
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than…