CVE-2012-2005 : Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before

Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published 2012-05-02 22:55:02

Updated 2025-04-11 00:51:22

Source HP Inc.

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2012-2005

HP » Insight Management Agents » Update B
Versions up to, including, (<=) 8.70.0.0
cpe:2.3:a:hp:insight_management_agents:*:b:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.70.0.0
cpe:2.3:a:hp:insight_management_agents:7.70.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.15.0.0
cpe:2.3:a:hp:insight_management_agents:8.15.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.11.0.0
cpe:2.3:a:hp:insight_management_agents:8.11.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.60.0.0
cpe:2.3:a:hp:insight_management_agents:7.60.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.51.0.0
cpe:2.3:a:hp:insight_management_agents:7.51.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.10.0.0
cpe:2.3:a:hp:insight_management_agents:7.10.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.0.0.0
cpe:2.3:a:hp:insight_management_agents:7.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.20.0.0
cpe:2.3:a:hp:insight_management_agents:8.20.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.22.0.0
cpe:2.3:a:hp:insight_management_agents:8.22.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.90.0.0
cpe:2.3:a:hp:insight_management_agents:7.90.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.80.0.0
cpe:2.3:a:hp:insight_management_agents:7.80.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.30.0.0
cpe:2.3:a:hp:insight_management_agents:7.30.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.20.0.0
cpe:2.3:a:hp:insight_management_agents:7.20.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.1.0.0
cpe:2.3:a:hp:insight_management_agents:8.1.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.50.0.0
cpe:2.3:a:hp:insight_management_agents:8.50.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.10.0.0
cpe:2.3:a:hp:insight_management_agents:8.10.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.0.0.0
cpe:2.3:a:hp:insight_management_agents:8.0.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.50.0.0
cpe:2.3:a:hp:insight_management_agents:7.50.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.41.0.0
cpe:2.3:a:hp:insight_management_agents:7.41.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 6.40.0.0
cpe:2.3:a:hp:insight_management_agents:6.40.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 6.31.0.0 Update B
cpe:2.3:a:hp:insight_management_agents:6.31.0.0:b:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 6.30.0.0
cpe:2.3:a:hp:insight_management_agents:6.30.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.40.0.0
cpe:2.3:a:hp:insight_management_agents:8.40.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.30.0.0
cpe:2.3:a:hp:insight_management_agents:8.30.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.26.0.0
cpe:2.3:a:hp:insight_management_agents:8.26.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.95.0.0
cpe:2.3:a:hp:insight_management_agents:7.95.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.91.0.0
cpe:2.3:a:hp:insight_management_agents:7.91.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.40.1.0
cpe:2.3:a:hp:insight_management_agents:7.40.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 7.40.0.0
cpe:2.3:a:hp:insight_management_agents:7.40.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.70.0.0
cpe:2.3:a:hp:insight_management_agents:8.70.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.5
cpe:2.3:a:hp:insight_management_agents:8.5:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition
HP » Insight Management Agents » Version: 8.60.0.0
cpe:2.3:a:hp:insight_management_agents:8.60.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2003 Server
When used together with: Microsoft » Windows Server 2003
When used together with: Microsoft » Windows Server 2008 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A X64 Edition

Exploit prediction scoring system (EPSS) score for CVE-2012-2005

EPSS FAQ

0.98%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 75 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-2005

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2012-2005

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-2005

http://www.securityfocus.com/archive/1/522548

SecurityFocus

CVEs referencing this url
http://www.securityfocus.com/bid/53341

HP Insight Management Agents Unspecified Multiple Remote Security Vulnerabilities

CVEs referencing this url
http://www.securitytracker.com/id?1027003

HP Insight Management Agents for Windows Server Bugs Permit Cross-Site Scripting, Cross-Site Request Forgery, and URL Redirection Attacks - SecurityTracker

CVEs referencing this url
http://secunia.com/advisories/49054

Sign in

CVEs referencing this url
http://osvdb.org/81668
https://exchange.xforce.ibmcloud.com/vulnerabilities/75314

HP Insight Management Agents unspecified cross-site scripting CVE-2012-2005 Vulnerability Report

Jump to

Vulnerability Details : CVE-2012-2005

Products affected by CVE-2012-2005

Exploit prediction scoring system (EPSS) score for CVE-2012-2005

CVSS scores for CVE-2012-2005

CWE ids for CVE-2012-2005

References for CVE-2012-2005