CVE-2010-3289: XSS
Published Oct 22, 2010
·Updated
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
23 affected components
HP Systems Insight Manager=sp1
HP Systems Insight Manager<=6.1
HP Systems Insight Manager=2.5
HP Systems Insight Manager=2.5.2.0
HP Systems Insight Manager=4.0
HP Systems Insight Manager=4.0-sp1
HP Systems Insight Manager=4.1
HP Systems Insight Manager=4.1-sp1
HP Systems Insight Manager=4.2
HP Systems Insight Manager=4.2-sp1
HP Systems Insight Manager=4.2-sp2
HP Systems Insight Manager=5.0
HP Systems Insight Manager=5.0-sp1
HP Systems Insight Manager=5.0-sp2
HP Systems Insight Manager=5.0-sp3
HP Systems Insight Manager=5.0-sp4
HP Systems Insight Manager=5.0-sp5
HP Systems Insight Manager=5.1
HP Systems Insight Manager=5.2
HP Systems Insight Manager=5.2-update_1
HP Systems Insight Manager=5.3
HP Systems Insight Manager=5.3-update_1
HP Systems Insight Manager=6.0
Event History
Oct 22, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3289?
CVE-2010-3289 has been classified as a medium severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2010-3289?
To fix CVE-2010-3289, you should upgrade HP Systems Insight Manager to version 6.2 or later.
3
What are the affected versions in CVE-2010-3289?
CVE-2010-3289 affects various versions of HP Systems Insight Manager from versions 2.5 to 6.1.
4
Can CVE-2010-3289 lead to data theft?
Yes, CVE-2010-3289 could allow remote attackers to inject scripts, potentially leading to data theft.
5
Is there a workaround for CVE-2010-3289?
There is no official workaround provided for CVE-2010-3289 other than upgrading to a patched version.