Read the docs
TI-2010-03889 Aliases CVE-2010-4111GHSA-9gc4-fprr-x2x4

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before…

Priority LOW 24CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Why it matters now

EPSS 0.01805 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 43

CPEVersionsRoleVendor
cpe:2.3:a:hp:insight_diagnostics:*:*:online:*:*:*:*:*up to 8.5.0.3625VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:6.3.0.878:*:online:*:*:*:*:*6.3.0.878VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:6.3.1.887:*:online:*:*:*:*:*6.3.1.887VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.0.0.1198:*:online:*:*:*:*:*7.0.0.1198VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.0.1.1219:*:online:*:*:*:*:*7.0.1.1219VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.4.0.1570:*:online:*:*:*:*:*7.4.0.1570VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.5.0.1679:*:online:*:*:*:*:*7.5.0.1679VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.5.5.1681:*:online:*:*:*:*:*7.5.5.1681VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.6.0.1984:*:online:*:*:*:*:*7.6.0.1984VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.7.0.2112:*:online:*:*:*:*:*7.7.0.2112VulnerableHewlett Packard Enterprise
Show 33 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:hp:insight_diagnostics:7.8.0.2257:*:online:*:*:*:*:*7.8.0.2257VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.9.0.2359:*:online:*:*:*:*:*7.9.0.2359VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.9.1.2401:*:online:*:*:*:*:*7.9.1.2401VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.0.0.2587:*:online:*:*:*:*:*8.0.0.2587VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.1.0.2718:*:online:*:*:*:*:*8.1.0.2718VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.1.1.2784:*:online:*:*:*:*:*8.1.1.2784VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.1.5.2890:*:online:*:*:*:*:*8.1.5.2890VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.2.0.3058:*:online:*:*:*:*:*8.2.0.3058VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.2.5.3157:*:online:*:*:*:*:*8.2.5.3157VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.3.0.3320:*:online:*:*:*:*:*8.3.0.3320VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.4.0.3521:*:online:*:*:*:*:*8.4.0.3521VulnerableHewlett Packard Enterprise
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:hp:insight_diagnostics:*:*:online:*:*:*:*:*up to 8.5.0-11VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:6.3.0-15:*:online:*:*:*:*:*6.3.0-15VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:6.3.1-1:*:online:*:*:*:*:*6.3.1-1VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.0.0-30:*:online:*:*:*:*:*7.0.0-30VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.0.1-8:*:online:*:*:*:*:*7.0.1-8VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.4.0-11:*:online:*:*:*:*:*7.4.0-11VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.5.0-14:*:online:*:*:*:*:*7.5.0-14VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.5.5-1:*:online:*:*:*:*:*7.5.5-1VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.6.0-23:*:online:*:*:*:*:*7.6.0-23VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.7.0-142:*:online:*:*:*:*:*7.7.0-142VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.8.0-159:*:online:*:*:*:*:*7.8.0-159VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.9.0-105:*:online:*:*:*:*:*7.9.0-105VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:7.9.1-15:*:online:*:*:*:*:*7.9.1-15VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.0.0-210:*:online:*:*:*:*:*8.0.0-210VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.1.0-136:*:online:*:*:*:*:*8.1.0-136VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.1.1-206:*:online:*:*:*:*:*8.1.1-206VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.1.5-311:*:online:*:*:*:*:*8.1.5-311VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.3.0-14:*:online:*:*:*:*:*8.3.0-14VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.3.1-105:*:online:*:*:*:*:*8.3.1-105VulnerableHewlett Packard Enterprise
cpe:2.3:a:hp:insight_diagnostics:8.4.0-18:*:online:*:*:*:*:*8.4.0-18VulnerableHewlett Packard Enterprise
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*all versionsRunning onLinux

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-4111
  2. 2026-10-03 Alias added: GHSA-9gc4-fprr-x2x4

References

Advisory 1

  • TI-2013-03119 HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors. CVSS 2.0HIGH 10.0
  • TI-2013-03120 Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php… CVSS 2.0HIGH 7.8
  • TI-2008-03389 Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote… CVSS 2.0HIGH 7.8
  • TI-2013-03121 hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not… CVSS 2.0MEDIUM 5.0
  • TI-2010-02874 Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences