CVE-2013-4802 Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc application lifecycle management | <= 11.50 | No fix listed |
| HP Inc application lifecycle management | = 11.00 | No fix listed |
References
- 95646 vdb-entry
- 53950 third-party-advisory
- 61450 vdb-entry
- 1028834 vdb-entry
- hp-application-cve20134802-xss(85948) vdb-entry
- HPSBGN02906 vendor-advisory