Unscored severity · published Jan 9, 2013
CVE-2013-0010
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted…
–
CVSS
16.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
System Center Operations Manager · Microsoft
2007; 2007 · source: NVD
Affected product
SC
System Center Operations Manager
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0010
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0010
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA13-008A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16232
More from System Center Operations Manager
9.8
CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
7.8
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
7.8
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
7.0
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
9.8
CVE-2024-21334
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability