----------------------------------------------------------------------


  Secunia CSI
+ Microsoft SCCM
-----------------------
= Extensive Patch Management

http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/


----------------------------------------------------------------------

TITLE:
HP Project and Portfolio Management Center Cross-Site Scripting
Vulnerabilities

SECUNIA ADVISORY ID:
SA39105

VERIFY ADVISORY:
http://secunia.com/advisories/39105/

DESCRIPTION:
Multiple vulnerabilities have been reported in HP Project and
Portfolio Management Center, which can potentially be exploited by
malicious people to conduct cross-site scripting attacks.

Input passed to unspecified parameters is not properly sanitised
before being returned to the user. This can be exploited to execute
arbitrary HTML and script code in a user's browser session in context
of an affected site.

The vulnerabilities are reported in version 7.1 SP10 and 7.5 SP3
running on AIX, HP-UX, Redhat Linux, Suse Linux, Solaris and Windows
Server.

SOLUTION:
Apply patches (please see the vendor advisory for details).

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
HPSBMA02436 SSRT080064:
http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01762443

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------