PT-2013-1585 · Hewlett Packard · Hp Network Node Manager I

Published 2013-02-06 · Updated 2019-10-09 · CVE-2012-3279

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i (NNMi) versions 8.x through 9.20

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting (XSS) vulnerabilities.

Recommendations For HP Network Node Manager i (NNMi) versions 8.x through 9.20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-3279

Affected Products

Hp Network Node Manager I

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3279 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03652323 · Vendor Advisory