XSS in Dell Powervault Ml6000
CVE-2012-1842
Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.012 (66.2th percentile) — read the EPSS interpretation.
Affected products
- Dell Powervault_ml6000 — versions 32u, 41u
- Dell Powervault_ml6000_firmware — versions 585g.gs003
- Dell Powervault_ml6010 — versions 5u
- Dell Powervault_ml6020 — versions 14u
- Dell Powervault_ml6030 — versions 23u
- Quantum Scalar_i500 — versions 5u, 14u, 23u
- Quantum Scalar_i500_firmware — versions i2, i3, i3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)