Vulnerability Description
Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Unity Operating Environment | < 4.3.1.1525703027 |
| Dell | Emc Unityvsa Operating Environment | < 4.3.1.1525703027 |
Related Weaknesses (CWE)
References
- https://seclists.org/fulldisclosure/2018/Sep/30Mailing ListThird Party Advisory
- https://seclists.org/fulldisclosure/2018/Sep/30Mailing ListThird Party Advisory
FAQ
What is CVE-2018-1246?
CVE-2018-1246 is a vulnerability with a CVSS score of 4.7 (MEDIUM). Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user ...
How severe is CVE-2018-1246?
CVE-2018-1246 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-1246?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Unity Operating Environment, Dell Emc Unityvsa Operating Environment.