Lucene search

[email protected]NVD:CVE-2012-2172

HistoryJun 22, 2012 - 10:24 a.m.

CVE-2012-2172

2012-06-2210:24:07

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.004

Percentile

74.5%

JSON

Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.

Affected configurations

Nvd

Node

ibmds_storage_manager_host_softwareRange≤10.83

ibmds_storage_manager_host_softwareMatch10.8

ibmds_storage_manager_host_softwareMatch10.60.x5.14

AND

ibmds4100

ibmds4100Match1724

ibmds4200Match1814

ibmds4300Match1722

ibmds4400Match1742

ibmds4500Match1742

ibmds4700Match1814

ibmds4800Match1815

ibmsystem_storage_dcs3700_storage_subsystemMatch1818

ibmsystem_storage_ds3200Match1726

ibmsystem_storage_ds3300Match1726

ibmsystem_storage_ds3400Match1726

ibmsystem_storage_ds3512Match1746

ibmsystem_storage_ds3524Match1746

ibmsystem_storage_ds3950_expressMatch1814

ibmsystem_storage_ds5020_disk_controllerMatch1814-20a

ibmsystem_storage_ds5100_storage_controllerMatch1818

ibmsystem_storage_ds5300_storage_controllerMatch1818

VendorProductVersionCPE
ibmds_storage_manager_host_software*cpe:2.3:a:ibm:ds_storage_manager_host_software:*:*:*:*:*:*:*:*
ibmds_storage_manager_host_software10.8cpe:2.3:a:ibm:ds_storage_manager_host_software:10.8:*:*:*:*:*:*:*
ibmds_storage_manager_host_software10.60.x5.14cpe:2.3:a:ibm:ds_storage_manager_host_software:10.60.x5.14:*:*:*:*:*:*:*
ibmds4100*cpe:2.3:h:ibm:ds4100:*:*:*:*:*:*:*:*
ibmds41001724cpe:2.3:h:ibm:ds4100:1724:*:*:*:*:*:*:*
ibmds42001814cpe:2.3:h:ibm:ds4200:1814:*:*:*:*:*:*:*
ibmds43001722cpe:2.3:h:ibm:ds4300:1722:*:*:*:*:*:*:*
ibmds44001742cpe:2.3:h:ibm:ds4400:1742:*:*:*:*:*:*:*
ibmds45001742cpe:2.3:h:ibm:ds4500:1742:*:*:*:*:*:*:*
ibmds47001814cpe:2.3:h:ibm:ds4700:1814:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	ds_storage_manager_host_software	*	cpe:2.3:a:ibm:ds_storage_manager_host_software::::::::
ibm	ds_storage_manager_host_software	10.8	cpe:2.3:a:ibm:ds_storage_manager_host_software:10.8:::::::*
ibm	ds_storage_manager_host_software	10.60.x5.14	cpe:2.3:a:ibm:ds_storage_manager_host_software:10.60.x5.14:::::::*
ibm	ds4100	*	cpe:2.3:h:ibm:ds4100::::::::
ibm	ds4100	1724	cpe:2.3:h:ibm:ds4100:1724:::::::*
ibm	ds4200	1814	cpe:2.3:h:ibm:ds4200:1814:::::::*
ibm	ds4300	1722	cpe:2.3:h:ibm:ds4300:1722:::::::*
ibm	ds4400	1742	cpe:2.3:h:ibm:ds4400:1742:::::::*
ibm	ds4500	1742	cpe:2.3:h:ibm:ds4500:1742:::::::*
ibm	ds4700	1814	cpe:2.3:h:ibm:ds4700:1814:::::::*