CVE-2013-2337: XSS
Published Jun 14, 2013
·Updated
Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
5 affected components
HP Service Manager=7.11
HP Service Manager=9.21
HP Service Manager=9.30
HP Service Manager=9.31
HP Service Center=6.2.8
Event History
Jun 14, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2337?
CVE-2013-2337 is rated as a medium severity vulnerability.
2
How do I fix CVE-2013-2337?
To fix CVE-2013-2337, upgrade to the latest version of HP Service Manager or ServiceCenter that addresses this vulnerability.
3
What software is affected by CVE-2013-2337?
CVE-2013-2337 affects HP Service Manager versions 7.11, 9.21, 9.30, 9.31 and HP ServiceCenter version 6.2.8.
4
What type of vulnerability is CVE-2013-2337?
CVE-2013-2337 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-2337 be exploited remotely?
Yes, CVE-2013-2337 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.