Lucene search

[email protected]CVE-2013-0936

HistoryMar 28, 2013 - 3:55 p.m.

CVE-2013-0936

2013-03-2815:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2013

0936

cross-site scripting

xss

emc smarts

ip manager

service assurance manager

server manager

voip availability manager

network protocol manager

mpls manager

remote attackers

web script

html

crafted url

nvd

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.7%

JSON

Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CPENameOperatorVersion
emc:smarts_mpls_manageremc smarts mpls managereq9.1
emc:smarts_server_manageremc smarts server managereq9.1
emc:smarts_ip_manageremc smarts ip managereq9.1
emc:smarts_voip_availability_manageremc smarts voip availability managereq9.1
emc:smarts_network_protocol_manageremc smarts network protocol managereq9.1
emc:smarts_services_assurance_manageremc smarts services assurance managereq9.1

CPE	Name	Operator	Version
emc:smarts_mpls_manager	emc smarts mpls manager	eq	9.1
emc:smarts_server_manager	emc smarts server manager	eq	9.1
emc:smarts_ip_manager	emc smarts ip manager	eq	9.1
emc:smarts_voip_availability_manager	emc smarts voip availability manager	eq	9.1
emc:smarts_network_protocol_manager	emc smarts network protocol manager	eq	9.1
emc:smarts_services_assurance_manager	emc smarts services assurance manager	eq	9.1

References

archives.neohapsis.com/archives/bugtraq/2013-03/0152.html

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.7%

JSON

Related for CVE-2013-0936

cvelist1 prion1 securityvulns2