XSS in Emc Rsa Data Protection Manager Appliance
CVE-2012-4612
Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (57.0th percentile) — read the EPSS interpretation.
Affected products
- Emc Rsa_data_protection_manager_appliance — versions 2.7.0, 3.0, 3.1
- Emc Rsa_data_protection_manager_software_server — versions 2.7.0, 3.0, 3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)