HP System Management Homepage Unspecified Cross-Site Scripting

A vulnerability has been reported in HP System Management Homepage (SMH), which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain input passed to unspecified parameters is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in SMH on HP-UX B.11.11, B.11.23, and B.11.31, and in versions prior to 2.1.10 on Linux and Windows.