VendorsHPbusiness_availability_centerall versions
Vulnerabilities

HP Business Availability Center (BAC)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2012-3256
Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published 2012-09-08 · Modified
6.8EPSS 0.010
CVE-2012-3257
HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors.
Published 2012-09-08 · Modified
4.6EPSS 0.011
CVE-2011-0274
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2011-01-24 · Modified
4.3EPSS 0.021
CVE-2012-0132
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2012-04-04 · Modified
4.3EPSS 0.019
CVE-2011-1856
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2011-05-16 · Modified
4.3EPSS 0.017
CVE-2012-3255
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2012-09-08 · Modified
4.3EPSS 0.016