CVE-2018-1202

State: Published
Severity: Not scored
Published: Mar 26, 2018
Updated: Sep 17, 2024
Reserved: Dec 6, 2017

Description

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Isilon OneFSDell EMC	versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6 and version 7.1.1.11Affected

References

103033vdb-entry
20180319 DSA-2018-018: Dell EMC Isilon OneFS Multiple Vulnerabilitiesmailing-list
https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
44039exploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.