HP Network Node Manager unknown details Cross-Site Scripting Vulnerability

Release date:
Updated on:

Affected Systems:
HP Network Node Manager I 9.x
HP Network Node Manager 8.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54815
Cve id: CVE-2012-2022

HP Network Node Manager I helps your IT department reduce the risk of service downtime and improve the Network service level.

Some unknown details in HP Network Node Manager I 9.0x, 9.1x, and 9.20 are returned to the user if they are not properly filtered. HTML and script code can be executed in the user browser of the affected site.

<* Source: HP

Link: http://secunia.com/advisories/50195/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

HP
--
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://itrc.hp.com