This script is Copyright (C) 2014-2016 Tenable Network Security, Inc.
The remote Windows host contains software that is affected by multiple
The version of HP Systems Insight Manager installed on the remote
Windows host is affected by the following vulnerabilities :
- An unspecified vulnerability exists that allows a remote
authenticated attacker to gain limited elevated
- A vulnerability exists that allows reflected cross-site
scripting attacks, due to the improper validation of
user-supplied input before it is returned to the users.
Using a specially crafted request, a remote attacker can
execute arbitrary script code within a user's browser.
- An unspecified flaw exists that allows a remote attacker
to conduct a clickjacking attack. (CVE-2014-2645)
See also :
Upgrade to HP Systems Insight Manager 7.4 or later. A hotfix has also
been made available for HP Systems Insight Manager 7.2.
Risk factor :
Medium / CVSS Base Score : 4.9
CVSS Temporal Score : 4.3
Public Exploit Available : false