CVE-2013-2361
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published at
2013-07-22T11:19Z
3792 days ago
Modified
2019-10-09T23:07Z
1522 days ago
CWE-79
Problem type
References
| URL | Type |
|---|---|
| SSRT101007 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 | HP |
GET https://vulnerabilitydata.com/api/details/CVE-2013-2361
{
"id": "CVE-2013-2361",
"published_date": "2013-07-22T11:19Z",
"last_modified_date": "2019-10-09T23:07Z",
"assigner": "hp-security-alert@hp.com",
"description": "Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"references": [
{
"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862",
"name": "SSRT101007",
"refsource": "HP",
"tags": [
"Vendor Advisory"
]
}
],
"impact": {
"baseMetricV2": {
"cvssV2": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.3
},
"severity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
},
"problem_type": "CWE-79"
}