CVE-2013-0010: Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allo...

Security readout for executives and security teams

CVE-2013-0010 is a cross-site scripting issue in the Microsoft System Center Operations Manager Web Console for 2007 SP1 and R2. An attacker could inject script or HTML through crafted input. The business risk is account or console abuse if a privileged operator views attacker-controlled content. Exposure is likely limited to organizations still running System Center Operations Manager 2007 SP1 or R2 Web Console. Internet-exposed consoles or broadly accessible management networks raise risk, but the source bundle does not confirm typical deployment exposure. Treat as a targeted remediation item for legacy monitoring infrastructure. It is not KEV-listed in the bundle, but affected systems are old and may be hard to defend if still exposed. Mitigation focus: Apply Microsoft guidance and updates from MS13-003 where applicable.; Prioritize remediation for any exposed SCOM Web Console instance.; Restrict Web Console access to trusted administrative networks..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.