HP Service Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Service Manager, which can be exploited by attacker to gain escalated privileges, conduct cross-site scripting attacks, disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

1. The application bundles a vulnerable version of Java.
   This vulnerabilities are identified in HP Service Manager versions 9.30 and 9.31 for Windows, Linux, HP-UX, Solaris, and AIX.
2. Certain unspecified input related to the Web Tier component is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
3. An unspecified error in the Web Tier component can be exploited to disclose certain potentially sensitive information.

The vulnerabilities 2 and 3 are identified in version 9.31 for Windows.