CVE Feed

    Dashboard / CVE / CVE-2014-2647

    CVE-2014-2647

    Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Published:Oct 19, 2014
    Last Modified:Apr 12, 2025
    EPS:Oct 19, 2014
    EPSS Score:0.02052
    CVSS Score:4.3

    Affected Products

    Vendor
    Hp
    Product
    Operations Agent

    Exploits

    http://www.exploit-db.com/exploits/35076http://www.exploit-db.com/exploits/35076https://www.exploit-db.com/exploits/35076

    Related CVEs

    CVE-2017-3733 (CVSS 7.5) — During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the origi…
    CVE-2014-2630 (CVSS 4.4) — Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privil…
    CVE-2012-2019 (CVSS 10) — Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary …
    CVE-2012-2020 (CVSS 10) — Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary …
    CVE-2011-4160 (CVSS 3.2) — Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux…
    CVE-2011-2608 (CVSS 6.4) — ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 1…
    CVE-2010-3005 (CVSS 6.8) — Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges…
    CVE-2010-3004 (CVSS 7.5) — Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute ar…
    CVE-2010-0444 (CVSS 10) — HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, whi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High