CVE-2011-2402
https://notcve.org/view.php?id=CVE-2011-2402
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en HP Network Automation v7.2x, v7.5x, v7.6x, v9.0, y v9.10 permite a atacantes remotos inyectar código script web o HTML a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=131188727830971&w=2 http://osvdb.org/74133 http://secunia.com/advisories/45454 http://securityreason.com/securityalert/8321 http://www.securityfocus.com/bid/48922 http://www.securitytracker.com/id?1025862 https://exchange.xforce.ibmcloud.com/vulnerabilities/68885 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2011-1725
https://notcve.org/view.php?id=CVE-2011-1725
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors. Vulnerabilidad no especificada en HP Network Automation v7.2x, v7.5x, v7.6x, v9.0, y v9.10 permite a atacantes remotos obtener información sensible a través de vectores desconocidos. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02789514 http://osvdb.org/72049 http://secunia.com/advisories/44304 http://secunia.com/advisories/44319 http://www.securityfocus.com/bid/47550 http://www.securitytracker.com/id?1025435 http://www.vupen.com/english/advisories/2011/1090 https://exchange.xforce.ibmcloud.com/vulnerabilities/67021 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •