Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-site scripting vulnerability in the Authorization Providers page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user’s browser session in the context of the OneFS website.
CPE | Name | Operator | Version |
---|---|---|---|
emc_isilon | ge | 8.1.0.0 | |
emc_isilon | le | 8.1.0.1 | |
emc_isilon | ge | 8.0.1.0 | |
emc_isilon | le | 8.0.1.2 | |
emc_isilon | ge | 8.0.0.0 | |
emc_isilon | le | 8.0.0.6 | |
emc_isilon | ge | 7.2.1.0 | |
emc_isilon | le | 7.2.1.6 |