CVE-2017-12544

Description

A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

Affected products

• Hewlett Packard Enterprise / System Management Homepage for Windows and Linuxprior to 7.6.1 – prior to 7.6.1

Exploits & PoCs

• nucleiHPE System Management - Cross-Site Scriptingby divya_mudgal

References

• MISChttp://www.securitytracker.com/id/1039437
• MISChttp://www.securityfocus.com/bid/101029
• MISChttps://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us