Cross-Site Scripting Vulnerability in HPE XP P9000 Command View Software
CVE-2018-7090
Key Information:
- Vendor
HP
- Status
- Vendor
- CVE Published:
- 6 August 2018
What is CVE-2018-7090?
Hewlett Packard Enterprise's XP P9000 Command View Advanced Edition Software is affected by a cross-site scripting vulnerability that can be exploited both locally and remotely. This flaw exists in versions 7.0.0-00 to earlier than 8.60-00 of the DevMgr, TSMgr, and RepMgr components. Attackers could leverage this vulnerability to inject malicious scripts into web pages, potentially compromising user data and session integrity. Organizations using the affected versions should take immediate action to update their software to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
HPE XP P9000 Command View Advanced Edition Software (CVAE) 7.0.0-00 to earlier than 8.60-00 versions 7.0.0-00 to earlier than 8.60-00
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved