CVE-2011-0274: XSS
First published: Mon Jan 24 2011(Updated: )
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Business Availability Center | =8.0 | |
| HP Business Availability Center | =8.05 | |
| HP Business Availability Center | =7.55 | |
| HP Business Service Management | =9.01 | |
| HP Business Availability Center | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vupen.com/english/advisories/2011/0188
- http://www.securityfocus.com/bid/45944
- http://securitytracker.com/id?1024986
- http://marc.info/?l=bugtraq&m=129562482815203&w=2
- http://secunia.com/advisories/43014
- http://secunia.com/advisories/43018
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64846
Frequently Asked Questions
What is the severity of CVE-2011-0274?
CVE-2011-0274 is classified as a medium severity vulnerability due to its potential for remote exploitation through cross-site scripting.
How do I fix CVE-2011-0274?
To fix CVE-2011-0274, upgrade your HP Business Availability Center or Business Service Management to a version that is not affected by this vulnerability.
Who is at risk for CVE-2011-0274?
Organizations using HP Business Availability Center versions 7.x to 8.05 and HP Business Service Management version 9.01 are at risk of CVE-2011-0274.
What types of attacks can result from CVE-2011-0274?
CVE-2011-0274 can enable attackers to execute arbitrary scripts or HTML, potentially leading to session hijacking or data theft.
Is CVE-2011-0274 still a risk in newer software versions?
No, CVE-2011-0274 has been addressed in subsequent updates beyond the affected versions.
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/hp
- canonical/hp business availability center
- version/hp business availability center/7.0
- version/hp business availability center/7.55
- version/hp business availability center/8.0
- version/hp business availability center/8.05
- canonical/hp business service management
- version/hp business service management/9.01