Test ID:	1.3.6.1.4.1.25623.1.0.902431
Category:	Web application abuses
Title:	HP/HPE System Management Homepage (SMH) Insight Diagnostics XSS Vulnerability (HPSBMA02615) - Active Check
Summary:	HP/HPE System Management Homepage (SMH) with Insight Diagnostics is; prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: HP/HPE System Management Homepage (SMH) with Insight Diagnostics is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused due imporper validation of user supplied input via 'query=onmouseover=' to the '/frontend2/help/search.php?', which allows attackers to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Vulnerability Impact: Successful exploitation will allow attackers to inject arbitrary HTML code in the context of an affected site. Affected Software/OS: HP/HPE SMH with Insight Diagnostics Online Edition before version 8.5.1.3712. Solution: Update to version 8.5.1.3712 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4111 HPdes Security Advisory: HPSBMA02615 http://marc.info/?l=bugtraq&m=129245189832672&w=2 HPdes Security Advisory: SSRT100228 http://www.securitytracker.com/id?1024897
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.