CVE-2011-1856

HP Business Availability Center <= 8.06 - Cross-Site Scripting

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3

Core References

Various Sources vendor-advisory x_refsource_hp

http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02823184

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025535

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/44569

Scores

EPSS 0.0070

EPSS Percentile 72.2%

Details

CWE

CWE-79

Status published

Products (9)

hp/business_availability_center 7.0

hp/business_availability_center 7.55

hp/business_availability_center 8.0

hp/business_availability_center 8.01

hp/business_availability_center 8.02

hp/business_availability_center 8.03

hp/business_availability_center 8.04

hp/business_availability_center 8.05

hp/business_availability_center < 8.06

Published May 16, 2011

Tracked Since Feb 18, 2026