VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 29, 2013· Updated Jun 17, 2026

CVE-2013-6198

CVE-2013-6198

Description

Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

7
  • Microfocus/Service Manager2 versions
    cpe:2.3:a:hp:service_manager:9.20:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:service_manager:9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.21:*:*:*:*:*:*:*
  • Microfocus/Service Manager Web Client2 versions
    cpe:2.3:a:hp:service_manager_web_client:9.20:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:service_manager_web_client:9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager_web_client:9.21:*:*:*:*:*:*:*
  • Microfocus/Service Manager Web Tier3 versions
    cpe:2.3:a:hp:service_manager_web_tier:9.20:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hp:service_manager_web_tier:9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager_web_tier:9.21:*:*:*:*:*:*:*
    • (no CPE)range: >= 9.20, < 9.21.661 p8

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.