CVE-2014-2644
Published Oct 6, 2014
Last updated 5 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
- Source
- hp-security-alert@hp.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:systems_insight_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAE6414D-10E0-4D10-A8D5-EF1D3163C2FD",
"versionEndIncluding": "7.3"
},
{
"criteria": "cpe:2.3:a:hp:systems_insight_manager:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A9BB3E0-9E80-49EC-A40E-00217C320E7A"
},
{
"criteria": "cpe:2.3:a:hp:systems_insight_manager:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5DBAFB2-819A-490F-ADF4-0FCFC09C7859"
},
{
"criteria": "cpe:2.3:a:hp:systems_insight_manager:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAE9B61A-A75E-492E-87BC-BC10241AD8D0"
}
],
"operator": "OR"
}
]
}
]