CVE-2012-2172 in Ds4100

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2012-04-04

Divulgación

2012-06-22

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
61081	IBM Ds4100 SoftwareRegistration.do secuencias de comandos en sitios cruzados	79	Prueba de concepto	Arreglo oficial	CVE-2012-2172

Fuentes

• MITRE
• NVD
• CVE Details