CVE-2010-3291: XSS

Published Oct 21, 2010

Updated

Cross-site scripting (XSS) vulnerability in HP AssetCenter 5.0x through AC5.03, and AssetManager 5.1x through AM5.12 and 5.2x through AM5.22, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

6 affected components

HP AssetCenter=ac_5.03

hp AssetManager=5.1

hp AssetManager=am_5.12

HP AssetCenter=5.0

hp AssetManager=5.2

hp AssetManager=am_5.22

Event History

Oct 21, 2010

CVE Published

via MITRE·06:12 PM

Data Sourced

via MITRE·06:12 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3291?

CVE-2010-3291 is classified as a high-severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2010-3291?

To fix CVE-2010-3291, update HP AssetCenter and HP Asset Manager to their latest versions as recommended by HP.

What types of software are affected by CVE-2010-3291?

CVE-2010-3291 affects HP AssetCenter versions 5.0 and 5.03, as well as HP Asset Manager versions 5.1, 5.12, and 5.22.

What are the risks associated with CVE-2010-3291?

The risks associated with CVE-2010-3291 include potential unauthorized remote code execution and data theft due to XSS vulnerabilities.

Can I find details about CVE-2010-3291 from official HP sources?

Yes, additional information about CVE-2010-3291 can be found in official HP security advisories.