35076exploit
http://www.exploit-db.com/exploits/35076 CVE-2014-2647
HP Operations Agent - Cross-Site Scripting iFrame Injection
Record summary
CVE-2014-2647 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBHP Operations Agent - Cross-Site Scripting iFrame InjectionExploitDB exploitby Matt SchmidtNot analyzed1 file
References
3SSRT101643Vendor advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472444 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-2647