Unscored severity · published May 3, 2011
CVE-2011-1727
Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Sitescope · HP
9.54; 10.13; 11.01; 11.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1727
Vendor Advisory
http://marc.info/?l=bugtraq&m=130374351406700&w=2
osvdb.org
http://osvdb.org/72061
secunia.com
http://secunia.com/advisories/44322
secunia.com
http://secunia.com/advisories/44354
securityreason.com
http://securityreason.com/securityalert/8235
www.securityfocus.com
http://www.securityfocus.com/bid/47554
More from Sitescope
9.8
CVE-2017-14349
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing…
7.8
CVE-2017-8951
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
7.5
CVE-2015-2802
An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset…
7.5
CVE-2017-8952
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
5.5
CVE-2017-8950
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found