Cross site scripting

2015-02-0917:59:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
compute_systems_managerle7.6.1
compute_systems_managereq8.0.0
compute_systems_managereq8.1.0
compute_systems_managereq8.1.1
device_managerle8.1.1
global_link_managerle8.1.1
replication_managerle8.1.1
tiered_storage_managerle8.1.1

Name	Operator	Version
compute_systems_manager	le	7.6.1
compute_systems_manager	eq	8.0.0
compute_systems_manager	eq	8.1.0
compute_systems_manager	eq	8.1.1
device_manager	le	8.1.1
global_link_manager	le	8.1.1
replication_manager	le	8.1.1
tiered_storage_manager	le	8.1.1