CVE-2012-2021

HP Assetmanager - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (1)

[Vendor Advisory] http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03403333

Scores

EPSS 0.0062

EPSS Percentile 69.9%

Classification

CWE

CWE-79

Status published

Affected Products (5)

hp/assetmanager

n/a/n/a

Timeline

Published Jul 16, 2012

Tracked Since Feb 18, 2026