CVE-2008-4411

Published: Oct 13, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663.

Affected (31)

Products: Hp: System Management Homepage

1 product

System Management Homepage

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Hp System Management Homepage	Up to 2.1.12-200
Hp System Management Homepage	Version 2.0.0
Hp System Management Homepage	Version 2.0.1
Hp System Management Homepage	Version 2.0.2
Hp System Management Homepage	Version 2.1.0-103
Hp System Management Homepage	Version 2.1.0-103(a)
Hp System Management Homepage	Version 2.1.0-109
Hp System Management Homepage	Version 2.1.0-118
Hp System Management Homepage	Version 2.1.10-186
Hp System Management Homepage	Version 2.1.10
Hp System Management Homepage	Version 2.1.11-197
Hp System Management Homepage	Version 2.1.11
Hp System Management Homepage	Version 2.1.12-118
Hp System Management Homepage	Version 2.1.1
Hp System Management Homepage	Version 2.1.2-127
Hp System Management Homepage	Version 2.1.2
Hp System Management Homepage	Version 2.1.3.132
Hp System Management Homepage	Version 2.1.3
Hp System Management Homepage	Version 2.1.4-143
Hp System Management Homepage	Version 2.1.4
Hp System Management Homepage	Version 2.1.5-146
Hp System Management Homepage	Version 2.1.5
Hp System Management Homepage	Version 2.1.6-156
Hp System Management Homepage	Version 2.1.6
Hp System Management Homepage	Version 2.1.7-168
Hp System Management Homepage	Version 2.1.7
Hp System Management Homepage	Version 2.1.8-177
Hp System Management Homepage	Version 2.1.8
Hp System Management Homepage	Version 2.1.9-178
Hp System Management Homepage	Version 2.1.9
Hp System Management Homepage	Version 2.1