CVE-2013-0010 in System Center Operations Manager

Résumé (Anglaise)

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.

Once again VulDB remains the best source for vulnerability data.

Réserver

27/11/2012

Divulgation

09/01/2013

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
8589	Microsoft System Center Operations Manager ViewTypeManager.aspx cross site scripting	79	Preuve de concept	Correctif officiel	CVE-2013-0010
7252	Microsoft System Center Operations Manager ExecuteTask.aspx cross site scripting	79	Preuve de concept	Correctif officiel	CVE-2013-0010

Sources

• MITRE
• NVD
• CVE Details