HP Business Availability Center vulnerabilities

6 CVEs affecting HP Business Availability Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3257, published 2012-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0274, published 2011-01-24. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to…
CVE-2012-0132, published 2012-04-05. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-1856, published 2011-05-16. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3255, published 2012-09-08. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3257, published 2012-09-08. Medium severity, CVSS 4.6. EPSS: 1.1% chance of exploitation in the next 30 days. HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors.
CVE-2012-3256, published 2012-09-08. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.