Unrated severityNVD Advisory· Published Oct 2, 2014· Updated May 6, 2026
CVE-2014-2640
CVE-2014-2640
Description
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
5cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*range: <=7.3
- cpe:2.3:a:hp:system_management_homepage:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:system_management_homepage:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:system_management_homepage:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:hp:system_management_homepage:7.2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.kb.cert.org/vuls/id/125228nvdThird Party AdvisoryUS Government Resource
- www.securitytracker.com/id/1030960nvd
- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplaynvd
News mentions
0No linked articles in our index yet.