Summary
This host is running HP SiteScope and is prone to cross site scripting and HTML injection vulnerabilities.
Impact
Successful exploitation will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Impact Level: Application
Solution
Upgrade to HP SiteScope version 11.1 and apply the SS1110110412 hotfix http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02807712
Insight
The flaws are caused by input validation errors when processing user-supplied data, which could allow cross site scripting or HTML injection attacks.
Affected
HP SiteScope versions 9.54, 10.13, 11.01, and 11.1
References
Severity
Classification
-
CVE CVE-2011-1726, CVE-2011-1727 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities