CVE-2013-0010 in Microsoft System Center Operations Manager

Summary

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.

Reservation

11/27/2012

Disclosure

01/09/2013

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
8589	Microsoft System Center Operations Manager ViewTypeManager.aspx cross site scripting	79	Proof-of-Concept	Official fix	CVE-2013-0010
7252	Microsoft System Center Operations Manager ExecuteTask.aspx cross site scripting	79	Proof-of-Concept	Official fix	CVE-2013-0010