Unrated severityNVD Advisory· Published Oct 3, 2006· Updated Jun 16, 2026

CVE-2006-5122

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.

Affected products

Microfocus/Sitescope
cpe:2.3:a:hp:mercury_sitescope:8.2_8.1.2.0:*:*:*:*:*:*:*
MERCURY/SiteScopellm-fuzzy
Range: = 8.2 (8.1.2.0)

Patches

Vulnerability mechanics

References

secunia.com/advisories/22215nvd
securityreason.com/securityalert/1670nvd
www.securityfocus.com/archive/1/447397/100/0/threadednvd
www.securityfocus.com/bid/20275nvd
www.vupen.com/english/advisories/2006/3888nvd
exchange.xforce.ibmcloud.com/vulnerabilities/29295nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000