CVE-2010-3994

Name: CVE-2010-3994
Creator: NVD / NIST
Published: 2010-10-28T20:00:03.043+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.93%

Last modified Jun 16, 2026

CVE-2010-3994 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.. EPSS estimates a 2.93% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Metrics

EPSS Probability

2.93%

85.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions	Update
Hp	Hp	version_control_repository_manager	6.0
Hp	Version Control Repository Manager	<= 6.1.2	—
Hp	Version Control Repository Manager	1.0.1288.1	—
Hp	Version Control Repository Manager	1.0.2241.0	—
Hp	Version Control Repository Manager	1.0.2289.0	—
Hp	Version Control Repository Manager	1.0.2345.0	—
Hp	Version Control Repository Manager	1.0.3085.0	—
Hp	Version Control Repository Manager	1.0.3086.0	—
Hp	Version Control Repository Manager	2.0.0.50	—
Hp	Version Control Repository Manager	2.0.1.30	—
Hp	Version Control Repository Manager	2.1.1.710	—
Hp	Version Control Repository Manager	2.1.1.720	—
Hp	Version Control Repository Manager	6.0.1	—
Hp	Version Control Repository Manager	6.0.2	—
Hp	Version Control Repository Manager	6.1	—

References

http://marc.info/?l=bugtraq&m=128811016023086&w=2Vendor Advisory
http://osvdb.org/68907
http://secunia.com/advisories/41998Vendor Advisory
http://securitytracker.com/id?1024644
http://www.securityfocus.com/bid/44431
http://marc.info/?l=bugtraq&m=128811016023086&w=2Vendor Advisory
http://osvdb.org/68907
http://secunia.com/advisories/41998Vendor Advisory
http://securitytracker.com/id?1024644
http://www.securityfocus.com/bid/44431

Timeline

Published: Oct 28, 2010
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2010-3994?

Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

How severe is CVE-2010-3994?

Severity scoring for CVE-2010-3994 is pending analysis. The EPSS model estimates a 2.93% probability of exploitation in the next 30 days.

How do I fix CVE-2010-3994?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-3994?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST