Cross-Site Scripting Vulnerability in HP Operations Agent from HP
CVE-2014-2647
Currently unrated
Key Information:
- Vendor
HP
- Status
- Vendor
- CVE Published:
- 19 October 2014
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2014-2647?
A cross-site scripting vulnerability exists in HP Operations Agent, part of HP Operations Manager, which could allow remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. This flaw can be exploited to compromise the integrity and confidentiality of the user interface, potentially leading to unauthorized actions performed on behalf of unsuspecting users.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.