Unscored severity · published Oct 6, 2014
CVE-2014-2644
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors
–
CVSS
3.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Systems Insight Manager · HP
through 7.3; 7.0; 7.1; 7.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2644
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2644
www.securityfocus.com
http://www.securityfocus.com/bid/70223
www.securitytracker.com
http://www.securitytracker.com/id/1030970
h20564.www2.hp.com
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121
More from Systems Insight Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
9.8
CVE-2020-7200
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6
9.8
CVE-2016-4366
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors
9.1
CVE-2016-2029
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than…