XSS in Dell Powervault Ml6000
CVE-2012-1842
Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 3.5 (Low). Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.012 (68.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 68th percentile — 68.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- Dell Powervault Ml6000 — versions 32u, 41u
- Dell Powervault Ml6000 Firmware — versions 585g.gs003
- Dell Powervault Ml6010 — versions 5u
- Dell Powervault Ml6020 — versions 14u
- Dell Powervault Ml6030 — versions 23u
- Quantum Scalar I500 — versions 5u, 14u, 23u
- Quantum Scalar I500 Firmware — versions i2, i3, i3.1
Weakness classification (CWE)
References
- secunia.com/advisories/48453 (third-party-advisory)
- www.kb.cert.org/vuls/id/913483 (US Government Resource, third-party-advisory)
- www.kb.cert.org/vuls/id/MAPG-8NNKN8 (US Government Resource)
- www.kb.cert.org/vuls/id/MAPG-8NVRPY (US Government Resource)
- osvdb.org/80239 (vdb-entry)
- secunia.com/advisories/48403 (third-party-advisory)
- osvdb.org/80225 (vdb-entry)