CVE-2011-1856: XSS
Published May 16, 2011
·Updated
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
9 affected components
hp Business Availability Center<=8.06
hp Business Availability Center=7.0
hp Business Availability Center=7.55
hp Business Availability Center=8.0
hp Business Availability Center=8.01
hp Business Availability Center=8.02
hp Business Availability Center=8.03
hp Business Availability Center=8.04
hp Business Availability Center=8.05
Event History
May 16, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1856?
The severity of CVE-2011-1856 is considered medium as it allows attackers to perform cross-site scripting (XSS) attacks.
2
How do I fix CVE-2011-1856?
To fix CVE-2011-1856, update HP Business Availability Center to version 8.07 or later which addresses this vulnerability.
3
Who is affected by CVE-2011-1856?
CVE-2011-1856 affects users of HP Business Availability Center versions 8.06 and earlier.
4
What type of attack does CVE-2011-1856 facilitate?
CVE-2011-1856 facilitates cross-site scripting (XSS) attacks allowing remote code injection through the application.
5
What are the potential impacts of CVE-2011-1856 exploitation?
Exploitation of CVE-2011-1856 can lead to unauthorized access to user sessions and manipulation of web content.