Lucene search
DellCVE-2013-0936HistoryMar 28, 2013 - 3:55 p.m.
CVE-2013-0936
2013-03-2815:55:09
CWE-79
dell
web.nvd.nist.gov
35
cve
2013
0936
cross-site scripting
xss
emc smarts
ip manager
service assurance manager
server manager
voip availability manager
network protocol manager
mpls manager
remote attackers
web script
html
crafted url
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.001
Percentile
47.3%
Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected configurations
Node
emcsmarts_ip_managerMatch9.1
ORemcsmarts_mpls_managerMatch9.1
ORemcsmarts_network_protocol_managerMatch9.1
ORemcsmarts_server_managerMatch9.1
ORemcsmarts_services_assurance_managerMatch9.1
ORemcsmarts_voip_availability_managerMatch9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| emc | smarts_ip_manager | 9.1 | cpe:2.3:a:emc:smarts_ip_manager:9.1:*:*:*:*:*:*:* |
| emc | smarts_mpls_manager | 9.1 | cpe:2.3:a:emc:smarts_mpls_manager:9.1:*:*:*:*:*:*:* |
| emc | smarts_network_protocol_manager | 9.1 | cpe:2.3:a:emc:smarts_network_protocol_manager:9.1:*:*:*:*:*:*:* |
| emc | smarts_server_manager | 9.1 | cpe:2.3:a:emc:smarts_server_manager:9.1:*:*:*:*:*:*:* |
| emc | smarts_services_assurance_manager | 9.1 | cpe:2.3:a:emc:smarts_services_assurance_manager:9.1:*:*:*:*:*:*:* |
| emc | smarts_voip_availability_manager | 9.1 | cpe:2.3:a:emc:smarts_voip_availability_manager:9.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-0936
2013-03-28 15:00:00
securityvulns
securityvulns
ESA-2013-018: EMC Smarts Product - Cross Site Scripting Vulnerability
2013-04-01 00:00:00
EMC Smarts security vulnerabilities
2013-04-01 00:00:00
nvd
nvd
CVE-2013-0936
2013-03-28 15:55:09
prion
prion
Cross site scripting
2013-03-28 15:55:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.001
Percentile
47.3%
Related for CVE-2013-0936