CVE-2010-1036: XSS
Published Apr 28, 2010
·Updated
Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
19 affected components
HP Systems Insight Manager=4.1
HP Systems Insight Manager=2.5
HP Systems Insight Manager=4.2
HP Systems Insight Manager=4.2-sp1
HP Systems Insight Manager<=5.2
HP Systems Insight Manager=5.0-sp5
HP Systems Insight Manager=5.0-sp3
HP Systems Insight Manager=5.0-sp4
HP Systems Insight Manager=5.1
HP Systems Insight Manager=4.1-sp1
HP Systems Insight Manager=5.0-sp2
HP Systems Insight Manager=2.5.2.0
HP Systems Insight Manager=4.2-sp2
HP Systems Insight Manager=4.0-sp1
HP Systems Insight Manager=sp1
HP Systems Insight Manager=5.2
HP Systems Insight Manager=5.0
HP Systems Insight Manager=4.0
HP Systems Insight Manager=5.0-sp1
Event History
Apr 28, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1036?
CVE-2010-1036 has a medium severity rating due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2010-1036?
To fix CVE-2010-1036, upgrade HP System Insight Manager to version 6.0 or later.
3
What versions of HP System Insight Manager are affected by CVE-2010-1036?
CVE-2010-1036 affects HP System Insight Manager versions 2.5, 4.0, 4.1, 4.2, and 5.0 through 5.2.
4
Can CVE-2010-1036 affect my organization's security posture?
Yes, CVE-2010-1036 can lead to unauthorized access and manipulation of data, compromising your organization's security.
5
Is CVE-2010-1036 a known vulnerability in web applications?
Yes, CVE-2010-1036 is a known cross-site scripting vulnerability that can affect the integrity of web applications.