First published: Tue Dec 31 2002(Updated: )
Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Compaq Management Agents | =2.0 | |
Compaq Management Agents | =2.1 | |
Compaq Management Agents | =2.1_b | |
Compaq Management Agents | =3.6.0 | |
Compaq Management Agents | =4.2 | |
Compaq Management Agents | =4.37 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2422 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks that can compromise user sessions.
To address CVE-2002-2422, update the Compaq Insight Management Agents to the latest available version to mitigate the cross-site scripting vulnerability.
CVE-2002-2422 affects Compaq Insight Management Agents versions 2.0, 2.1, 3.6.0, 4.2, and 4.3.7.
CVE-2002-2422 is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary web script or HTML.
CVE-2002-2422 does not allow remote code execution but can result in the unauthorized execution of scripts within a user's browser context.