XSS in IBM Ds4100
CVE-2012-2172
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.016 (75.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 75th percentile — 75.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: 0.000
Affected products
- IBM Ds4100 — versions 1724
- IBM Ds4200 — versions 1814
- IBM Ds4300 — versions 1722
- IBM Ds4400 — versions 1742
- IBM Ds4500 — versions 1742
- IBM Ds4700 — versions 1814
- IBM Ds4800 — versions 1815
- IBM Ds Storage Manager Host Software — versions 10.8, 10.60.x5.14
- IBM System Storage Dcs3700 Subsystem — versions 1818
- IBM System Storage Ds3200 — versions 1726