Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP SiteScope SNMP Trap 跨站脚本漏洞
Vulnerability Description
HP SiteScope提供无代理监控,补充现有基于代理的解决方案,帮助保持分布式IT基础架构的可用性和性能。 HP SiteScope在处理SNMP信息的显示时存在漏洞,可以将SiteScope服务器配置为接收设备的SNMP Trap,并可以通过Web界面查看SNMP监控的状态和所接收到SNMP trap消息的内容。未经过滤便在管理界面中呈现了SNMP消息,在查看信息时可能在用户浏览器会话中执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A