First published: Fri Jul 19 2013(Updated: )
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP System Management Homepage | <=7.2 | |
HP System Management Homepage | =7.0 | |
HP System Management Homepage | =7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-2364 has a medium severity rating due to its potential for exploitation by remote authenticated users.
To fix CVE-2013-2364, upgrade HP System Management Homepage to version 7.2.1 or later.
CVE-2013-2364 affects users of HP System Management Homepage versions up to 7.2.0.
CVE-2013-2364 is classified as a cross-site scripting (XSS) vulnerability.
Yes, CVE-2013-2364 can be exploited remotely by authenticated users.