Unscored severity · published Jan 15, 2015
CVE-2014-7881
Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Insight Control Server Deployment · HP
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7881
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7881
secunia.com
http://secunia.com/advisories/62162
Not Applicable
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04537915
More from Insight Control Server Deployment
8.4
CVE-2016-4364
HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors
8.1
CVE-2016-4362
HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors
7.5
CVE-2016-4365
HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors
6.1
CVE-2016-4363
HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors
–
CVE-2013-6206
Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a…