HP Mercury Sitescope vulnerabilities

2 CVEs affecting HP Mercury Sitescope, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5134, published 2006-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-5134, published 2006-10-03. Medium severity, CVSS 4.0. EPSS: 1.5% chance of exploitation in the next 30 days. Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to the classic interface) via attempted HTML injection into the "new monitor…
CVE-2006-5122, published 2006-10-03. Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field"…