CVE-2010-3010
HP 3Com OfficeConnect Gigabit VPN Firewall <1.0.13 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage (SMH) was originally assigned CVE-2010-3010 due to a CNA error, but CVE-2010-3012 is the appropriate identifier for the SMH issue.
Scores
EPSS
0.0047
EPSS Percentile
64.4%
Classification
CWE
CWE-79
Status
published
Affected Products (4)
hp/3crevf100-73
hp/3com_officeconnect_gigabit_vpn_firewall_software
< 1.0.12
hp/3com_officeconnect_gigabit_vpn_firewall_software
n/a/n/a
Timeline
Published
Sep 15, 2010
Tracked Since
Feb 18, 2026