Cross site scripting

2012-03-2210:17:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
powervault_ml6000eq32.0.117
powervault_ml6000eq41.0.117
powervault_ml6000_firmwareeq585.0.0-g-gs3
powervault_ml6010eq5.0.117
powervault_ml6020eq14.0.117
powervault_ml6030eq23.0.117
scalar_i500eq5.0.117
scalar_i500eq14.0.117
scalar_i500eq23.0.117
scalar_i500_firmwareeq<= i7.0.2

Name	Operator	Version
powervault_ml6000	eq	32.0.117
powervault_ml6000	eq	41.0.117
powervault_ml6000_firmware	eq	585.0.0-g-gs3
powervault_ml6010	eq	5.0.117
powervault_ml6020	eq	14.0.117
powervault_ml6030	eq	23.0.117
scalar_i500	eq	5.0.117
scalar_i500	eq	14.0.117
scalar_i500	eq	23.0.117
scalar_i500_firmware	eq	<= i7.0.2