{"api_version":"1","generated_at":"2026-07-23T07:57:48+00:00","cve":"CVE-2011-0274","urls":{"html":"https://cve.report/CVE-2011-0274","api":"https://cve.report/api/cve/CVE-2011-0274.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-0274","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0274"},"summary":{"title":"CVE-2011-0274","description":"Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"hp","published_at":"2011-01-24 18:00:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/45944","name":"http://www.securityfocus.com/bid/45944","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Business Availability Center and Business Service Management Cross Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1024986","name":"http://securitytracker.com/id?1024986","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Business Availability Center and Business Service Management Input Validation Flaw Permits Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0188","name":"http://www.vupen.com/english/advisories/2011/0188","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64846","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64846","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/43014","name":"http://secunia.com/advisories/43014","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"HP Business Availability Center Cross-Site Scripting Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2","name":"http://marc.info/?l=bugtraq&m=129562482815203&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"'[security bulletin] HPSBMA02622 SSRT100342 rev.1 - HP Business Availability Center (BAC) and Busines' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/43018","name":"http://secunia.com/advisories/43018","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"HP Business Service Management Cross-Site Scripting Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0274","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0274","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"business_availability_center","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"business_availability_center","cpe6":"7.55","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"business_availability_center","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"business_availability_center","cpe6":"8.05","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"business_service_management","cpe6":"9.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:51:07.676Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"SSRT100342","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2"},{"name":"43014","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/43014"},{"name":"HPSBMA02622","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2"},{"name":"1024986","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1024986"},{"name":"ADV-2011-0188","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0188"},{"name":"hp-bac-bsm-xss(64846)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64846"},{"name":"45944","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45944"},{"name":"43018","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/43018"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-01-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","shortName":"hp"},"references":[{"name":"SSRT100342","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2"},{"name":"43014","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/43014"},{"name":"HPSBMA02622","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2"},{"name":"1024986","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1024986"},{"name":"ADV-2011-0188","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0188"},{"name":"hp-bac-bsm-xss(64846)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64846"},{"name":"45944","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45944"},{"name":"43018","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/43018"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"hp-security-alert@hp.com","ID":"CVE-2011-0274","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"SSRT100342","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2"},{"name":"43014","refsource":"SECUNIA","url":"http://secunia.com/advisories/43014"},{"name":"HPSBMA02622","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=129562482815203&w=2"},{"name":"1024986","refsource":"SECTRACK","url":"http://securitytracker.com/id?1024986"},{"name":"ADV-2011-0188","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0188"},{"name":"hp-bac-bsm-xss(64846)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64846"},{"name":"45944","refsource":"BID","url":"http://www.securityfocus.com/bid/45944"},{"name":"43018","refsource":"SECUNIA","url":"http://secunia.com/advisories/43018"}]}}}},"cveMetadata":{"assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","assignerShortName":"hp","cveId":"CVE-2011-0274","datePublished":"2011-01-24T17:00:00.000Z","dateReserved":"2010-12-23T00:00:00.000Z","dateUpdated":"2024-08-06T21:51:07.676Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-01-24 18:00:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:business_availability_center:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A6225B39-0AC0-44F0-96C6-6A5B51F3A354"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:business_availability_center:7.55:*:*:*:*:*:*:*","matchCriteriaId":"C79FD56F-AEA9-44C8-A3FA-E075885CE220"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:business_availability_center:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CB6BA7-F5DA-4AFB-AF9B-E185EA808AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:business_availability_center:8.05:*:*:*:*:*:*:*","matchCriteriaId":"F19F9808-E070-4085-8133-D6EB8C90F638"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:business_service_management:9.01:*:*:*:*:*:*:*","matchCriteriaId":"1F0CDBAB-B573-4AC7-ADDA-860554ED8C06"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"274","Ordinal":"1","Title":"CVE-2011-0274","CVE":"CVE-2011-0274","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"274","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2011-0274"},{"CveYear":"2011","CveId":"274","Ordinal":"2","NoteData":"2011-01-24","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"274","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}