Unscored severity · published Oct 9, 2007
CVE-2007-5302
Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows,…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Hp-ux · HP
11.11; 11.23; 11.31 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5302
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5302
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01183265
Patch
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01183597
osvdb.org
http://osvdb.org/37603
Patch
http://secunia.com/advisories/27067
www.securityfocus.com
http://www.securityfocus.com/bid/25953
www.securitytracker.com
http://www.securitytracker.com/id?1018775
More from Hp-ux
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
9.8
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
9.3
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services