Cross-Site Scripting Vulnerability in HP JetAdvantage Security Manager
CVE-2017-2746

6.1MEDIUM

Key Information:

Vendor

HP
Status
HP Jetadvantage Security Manager
Vendor
CVE Published:
23 January 2018

What is CVE-2017-2746?

Security vulnerabilities have been identified in HP JetAdvantage Security Manager prior to version 3.0.1. These vulnerabilities could be exploited to execute stored cross-site scripting attacks, allowing an attacker to potentially create a denial of service condition. Users are advised to upgrade to the latest version to mitigate these risks.

Affected Version(s)

HP JetAdvantage Security Manager before 3.0.1

References

https://support.hp.com/us-en/document/c05639510
vendor-advisoryx_refsource_HP

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.