Lucene search

[email protected]CVE-2012-1842

HistoryMar 22, 2012 - 10:17 a.m.

CVE-2012-1842

2012-03-2210:17:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-1842

cross-site scripting

xss

quantum scalar i500

tape library

firmware vulnerability

dell ml6000

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

quantumscalar_i500_firmwareRange≤i7.0.2

quantumscalar_i500_firmwareMatchi2

quantumscalar_i500_firmwareMatchi3

quantumscalar_i500_firmwareMatchi3.1

quantumscalar_i500_firmwareMatchi4

quantumscalar_i500_firmwareMatchi5

quantumscalar_i500_firmwareMatchi5.1

quantumscalar_i500_firmwareMatchi6

quantumscalar_i500_firmwareMatchi6.1

quantumscalar_i500_firmwareMatchi7

quantumscalar_i500_firmwareMatchi7.0.1

quantumscalar_i500_firmwareMatchsp4

quantumscalar_i500_firmwareMatchsp4.2

AND

quantumscalar_i500Match5u

quantumscalar_i500Match14u

quantumscalar_i500Match23u

Node

dellpowervault_ml6000_firmwareMatch585g.gs003

AND

dellpowervault_ml6000Match32u

dellpowervault_ml6000Match41u

dellpowervault_ml6010Match5u

dellpowervault_ml6020Match14u

dellpowervault_ml6030Match23u

CPENameOperatorVersion
quantum:scalar_i500_firmwarequantum scalar i500 firmwarelei7.0.2
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi2
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi3
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi3.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi4
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi5
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi5.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi6
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi6.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi7

CPE	Name	Operator	Version
quantum:scalar_i500_firmware	quantum scalar i500 firmware	le	i7.0.2
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i2
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i3
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i3.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i4
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i5
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i5.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i6
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i6.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i7

Rows per page:

1-10 of 161

References

osvdb.org/80225

osvdb.org/80239

secunia.com/advisories/48403

secunia.com/advisories/48453

www.kb.cert.org/vuls/id/913483

www.kb.cert.org/vuls/id/MAPG-8NNKN8

www.kb.cert.org/vuls/id/MAPG-8NVRPY

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

Related for CVE-2012-1842

prion1 cvelist1 nvd1 openvas2 cert1