CVE Feed

    Dashboard / CVE / CVE-2011-5184

    CVE-2011-5184

    Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) nodename parameter to nnm/protected/configurationpoll.jsp, (3) nnm/protected/ping.jsp, (4) nnm/protected/statuspoll.jsp, or (5) nnm/protected/traceroute.jsp; or (6) field parameter to nmm/validate. NOTE: this might be a duplicate of CVE-2011-4155 or CVE-2011-4156.

    Published:Sep 20, 2012
    Last Modified:Apr 11, 2025
    EPS:Sep 20, 2012
    EPSS Score:0.02641
    CVSS Score:4.3

    Affected Products

    Vendor
    Hp
    Product
    Network Node Manager I

    Exploits

    http://0a29.blogspot.com/2011/11/0a29-11-1-cross-site-scripting.htmlhttp://osvdb.org/77396http://osvdb.org/77397http://osvdb.org/77398http://osvdb.org/77399http://osvdb.org/77400http://www.securityfocus.com/bid/50806http://0a29.blogspot.com/2011/11/0a29-11-1-cross-site-scripting.htmlhttp://osvdb.org/77396http://osvdb.org/77397http://osvdb.org/77398http://osvdb.org/77399http://osvdb.org/77400http://www.securityfocus.com/bid/50806https://www.exploit-db.com/exploits/36353https://www.exploit-db.com/exploits/36354https://www.exploit-db.com/exploits/36355https://www.exploit-db.com/exploits/36356https://www.exploit-db.com/exploits/36357

    Related CVEs

    CVE-2016-4397 (CVSS 7.8) — A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.1…
    CVE-2016-4398 (CVSS 8.8) — A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10…
    CVE-2016-4399 (CVSS 5.4) — A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10…
    CVE-2016-4400 (CVSS 5.4) — A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10…
    CVE-2017-8948 (CVSS 9.8) — A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.…
    CVE-2016-2014 (CVSS 8.1) — HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users t…
    CVE-2016-2011 (CVSS 5.4) — Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, a…
    CVE-2016-2012 (CVSS 6.5) — HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass a…
    CVE-2016-2009 (CVSS 8.8) — HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users t…
    CVE-2016-2010 (CVSS 5.4) — Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, a…

    References

    http://0a29.blogspot.com/2011/11/0a29-11-1-cross-site-scripting.html
    http://osvdb.org/77396
    http://osvdb.org/77397
    http://osvdb.org/77398
    http://osvdb.org/77399
    http://osvdb.org/77400
    http://osvdb.org/77401
    http://secunia.com/advisories/46941
    http://www.securityfocus.com/archive/1/520653/100/0/threaded
    http://www.securityfocus.com/bid/50806
    https://exchange.xforce.ibmcloud.com/vulnerabilities/71527
    https://exchange.xforce.ibmcloud.com/vulnerabilities/71528
    http://0a29.blogspot.com/2011/11/0a29-11-1-cross-site-scripting.html
    http://osvdb.org/77396
    http://osvdb.org/77397
    http://osvdb.org/77398
    http://osvdb.org/77399
    http://osvdb.org/77400
    http://osvdb.org/77401
    http://secunia.com/advisories/46941
    http://www.securityfocus.com/archive/1/520653/100/0/threaded
    http://www.securityfocus.com/bid/50806
    https://exchange.xforce.ibmcloud.com/vulnerabilities/71527
    https://exchange.xforce.ibmcloud.com/vulnerabilities/71528

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High