Unscored severity · published Aug 1, 2011
CVE-2011-2402
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Network Automation · HP
7.2; 7.5; 7.6; 9.0; 9.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2402
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2402
Vendor Advisory
http://marc.info/?l=bugtraq&m=131188727830971&w=2
osvdb.org
http://osvdb.org/74133
secunia.com
http://secunia.com/advisories/45454
securityreason.com
http://securityreason.com/securityalert/8321
www.securityfocus.com
http://www.securityfocus.com/bid/48922
www.securitytracker.com
http://www.securitytracker.com/id?1025862
More from Network Automation
9.8
CVE-2017-5814
A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found
9.8
CVE-2017-5810
A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found
9.8
CVE-2016-8511
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11,…
9.8
CVE-2016-1989
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a…
9.8
CVE-2016-1988
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a…