Cross site scripting

In System Management Module SMM versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting...

CVE-2018-16096

In System Management Module SMM versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting...

CVE-2018-16096 System Management Module Vulnerabilities

In System Management Module SMM versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting...

CVE-2018-16096: Improper Neutralization of Input During Web Page Generation

In System Management Module SMM versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting...

PT-2018-13409

Name of the Vulnerable Software and Affected Versions System Management Module SMM versions prior to 1.06 Description The issue is related to the SMM web interface, specifically the part responsible for changing Enclosure VPD. It fails to properly sanitize input for HTML tags, which could lead to...