Unscored severity · published Mar 3, 2015
CVE-2014-7896
Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before 7.6.1-06, and HP XP7 Global Link Manager Software (aka HGLM) 6.x through 8.x before 8.1.2-00, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XP
XP P9000 Device Manager · HP
through 8.1.1 · source: NVD
XP
XP P9000 Replication Manager · HP
through 7.6.1 · source: NVD
XP
XP P9000 Tiered Storage Manager · HP
through 8.1.1 · source: NVD
XG
Xp7 Global Link Manager Software · HP
through 8.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7896
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7896
www.securitytracker.com
http://www.securitytracker.com/id/1031828
h20564.www2.hp.com
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04582371
More from XP P9000 Device Manager
7.5
CVE-2018-7077
A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior…