Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP Network Automation跨站脚本攻击漏洞
Vulnerability Description
HP Network Automation是美国惠普(HP)公司的一套自动化网络配置管理工具。该工具能对分布广泛的多厂商网络设备进行自动化的配置变更、软件更新、合规审计以及跟踪和控制。 HP Network Automation 7.2x,7.5x,7.6x,9.0和9.10版本没有对用户提供的输入进行充分过滤,导致存在跨站脚本攻击漏洞。远程攻击者可利用该漏洞执行受影响站点上下文用户浏览器中的任意脚本代码,并窃取基于cookie的认证证书。
CVSS Information
N/A
Vulnerability Type
N/A