Cross-Site Scripting Vulnerability in HP JetAdvantage Security Manager
CVE-2017-2745

6.1MEDIUM

Key Information:

Vendor

HP
Status
HP Jetadvantage Security Manager
Vendor
CVE Published:
17 January 2017

What is CVE-2017-2745?

HP JetAdvantage Security Manager versions prior to 3.0.1 have been found to contain potential security vulnerabilities that could be exploited through stored cross-site scripting (XSS). This vulnerability allows attackers to inject malicious scripts, which could then execute in the context of a user's browser, potentially leading to unauthorized access and manipulation of user data.

Affected Version(s)

HP JetAdvantage Security Manager before 3.0.1

References

https://support.hp.com/us-en/document/c05639510
vendor-advisoryx_refsource_HP

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.