XSS in Emc Rsa Data Protection Manager Appliance

CVE-2013-3288

Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

Affected products

Emc Rsa_data_protection_manager_appliance — versions 3.2, 3.2.1, 3.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)