48 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to inject arbitrary web script or HTML vi...
CVE-2012-1843
The CVE-2012-1843 issue affects Quantum Scalar i500 (and rebranded Dell ML6000/IBM TS3310) web interface: a CSRF in saveRestore.htm allows an authenticated remote user to cause execution of Linux commands via the fileName parameter, effectively hijacking user authentication and potentially runnin...
CVE-2012-1844
CVE-2012-1844 affects Quantum Scalar i500, Dell ML6000, and IBM TS3310 tape libraries. Firmware before i7.0.3 (604G.GS00100) for i500, before A20-00 (590G.GS00100) for ML6000, and before R6C (606G.GS001) for TS3310 contains pre-configured default accounts with fixed passwords, enabling remote acc...
CVE-2012-1842
CVE-2012-1842 affects Quantum Scalar i500 (and rebranded/Dell ML6000, IBM TS3310) web interface. The vulnerability is a cross-site scripting flaw in checkQKMProg.htm that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected firmware versions: Quantum i500 befo...
CVE-2011-1372
The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors...
CVE-2009-2680
Unspecified vulnerability in the Remote Management Interface RMI for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape...
