CVE-2013-2364: XSS
Published Jul 19, 2013
·Updated
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
3 affected components
HP System Management Homepage<=7.2
HP System Management Homepage=7.0
HP System Management Homepage=7.1
Event History
Jul 19, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2364?
CVE-2013-2364 has a medium severity rating due to its potential for exploitation by remote authenticated users.
2
How do I fix CVE-2013-2364?
To fix CVE-2013-2364, upgrade HP System Management Homepage to version 7.2.1 or later.
3
Who is affected by CVE-2013-2364?
CVE-2013-2364 affects users of HP System Management Homepage versions up to 7.2.0.
4
What type of vulnerability is CVE-2013-2364?
CVE-2013-2364 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-2364 be exploited remotely?
Yes, CVE-2013-2364 can be exploited remotely by authenticated users.