Detections
Analytics
HP SiteScope XSS
medium Nessus Plugin ID 53622
Language:
Synopsis
The remote web server hosts a version of HP SiteScope that is vulnerable to a cross-site scripting attack.Description
There is a cross-site scripting vulnerability in this installation of HP SiteScope that may allow an attacker to execute arbitrary script code in the browser of an unsuspecting user. Such script code could steal authentication credentials and be used to launch other attacks.Solution
Upgrade to version 11.1 and install hotfix SS1110110412.See Also
Plugin Details
Severity: Medium
ID: 53622
File Name: hp_sitescope_xss.nasl
Version: 1.8
Type: remote
Family: CGI abuses : XSS
Published: 5/2/2011
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:hp:mercury_sitescope
Required KB Items: www/sitescope
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Patch Publication Date: 4/21/2011
Vulnerability Publication Date: 4/21/2011
Reference Information
CVE: CVE-2011-1726
BID: 47554