[email protected]CVE-2012-1842

HistoryMar 22, 2012 - 10:17 a.m.

CVE-2012-1842

2012-03-2210:17:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-1842

cross-site scripting

xss

quantum scalar i500

tape library

firmware vulnerability

dell ml6000

nvd

5.9 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.0%

JSON

Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
quantum:scalar_i500_firmwarequantum scalar i500 firmwarelei7.0.2
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi2
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi3
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi3.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi4
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi5
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi5.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi6
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi6.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi7

CPE	Name	Operator	Version
quantum:scalar_i500_firmware	quantum scalar i500 firmware	le	i7.0.2
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i2
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i3
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i3.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i4
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i5
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i5.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i6
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i6.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i7

Rows per page:

1-10 of 221

References

osvdb.org/80225

osvdb.org/80239

secunia.com/advisories/48403

secunia.com/advisories/48453

www.kb.cert.org/vuls/id/913483

www.kb.cert.org/vuls/id/MAPG-8NNKN8

www.kb.cert.org/vuls/id/MAPG-8NVRPY

5.9 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.0%

JSON

Related for CVE-2012-1842

prion1 cvelist1 openvas2 cert1