CVE-2013-4802

HP ALM Quality Center <11.51 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565.

References (6)

[Vendor Advisory] https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03864640

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/61450

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/85948

[Third Party Advisory, VDB Entry] http://osvdb.org/95646

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1028834

[Third Party Advisory] http://secunia.com/advisories/53950

Scores

EPSS 0.0078

EPSS Percentile 73.6%

Details

CWE

CWE-79

Status published

Products (3)

hp/application_lifecycle_management < 11.50

hp/application_lifecycle_management

n/a/n/a

Published Jul 29, 2013

Tracked Since Feb 18, 2026