CVE-2016-2010: HP Network Node Manager I

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011.

Affected products

• HP Network Node Manager I: version 9.20 only; version 9.23 only; version 9.24 only; version 9.25 only; version 10.00 only; version 10.01 only

Published 2016-05-07. Last modified 2026-06-17.