CVE-2011-5184 Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) n...
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) nodename parameter to nnm/protected/configurationpoll.jsp, (3) nnm/protected/ping.jsp, (4) nnm/protected/statuspoll.jsp, or (5) nnm/protected/traceroute.jsp; or (6) field parameter to nmm/validate. NOTE: this might be a duplicate of CVE-2011-4155 or CVE-2011-4156.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc network node manager i | = 9.10 | No fix listed |
References
- 0a29.blogspot.com exploit
- 77396 exploit vdb-entry
- 77397 exploit vdb-entry
- 77398 exploit vdb-entry
- 77399 exploit vdb-entry
- 77400 exploit vdb-entry
- 77401 vdb-entry
- 46941 third-party-advisory vendor-advisory
- 20111123 0A29-11-1 : Cross-Site Scripting vulnerabilities in HP Network Node Manager i 9.10 mailing-list
- 50806 exploit vdb-entry
- nnmi-node-xss(71527) vdb-entry
- nnmi-field-xss(71528) vdb-entry