We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2018-1246



Description

Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser.

Reserved 2017-12-06 | Published 2018-09-28 | Updated 2024-09-17 | Assigner dell


MEDIUM: 4.7CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Problem types

Reflected Cross-site Scripting (XSS)

Product status

Any version before 4.3.1.1525703027
affected

Any version before 4.3.1.1525703027
affected

References

seclists.org/fulldisclosure/2018/Sep/30 (20180918 DSA-2018-101: Dell EMC Unity Family Multiple Vulnerabilities) mailing-list

cve.org (CVE-2018-1246)

nvd.nist.gov (CVE-2018-1246)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2018-1246

Support options

Helpdesk Chat, Email, Knowledgebase