This host is missing an important security update according to Microsoft Bulletin MS13-003.

Successful exploitation will allow remote attackers to insert script code or issue commands to the SCOM server , which will be executed in a user's browser session in the context of an affected site. Impact Level: Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms13-003

Input validation error due the way System Center Operations Manager handles specially crafted requests, which can be exploited to insert arbitrary HTML and script code.

Microsoft System Center Operations Manager 2007 R2 Microsoft System Center Operations Manager 2007 SP1

• http://secunia.com/advisories/51686/
• http://technet.microsoft.com/en-us/security/bulletin/ms13-003
• http://xforce.iss.net/xforce/xfdb/78069
• http://xforce.iss.net/xforce/xfdb/78070

---

Updated on 2015-03-25