We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2018-1246



Assignerdell
Reserved2017-12-06
Published2018-09-28
Updated2024-09-17

Description

Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser.



MEDIUM: 4.7CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Product status

Any version before 4.3.1.1525703027
affected

Any version before 4.3.1.1525703027
affected

References

https://seclists.org/fulldisclosure/2018/Sep/30 (20180918 DSA-2018-101: Dell EMC Unity Family Multiple Vulnerabilities) mailing-list

cve.org CVE-2018-1246

nvd.nist.gov CVE-2018-1246

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2018-1246
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.