PT-2013-2730 · Emc · Emc Smarts Ip Manager+5
Publicado
2013-03-28
·
Atualizado
2013-03-29
·
CVE-2013-0936
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
EMC Smarts IP Manager versions prior to 9.2
EMC Smarts Service Assurance Manager versions prior to 9.2
EMC Smarts Server Manager versions prior to 9.2
EMC Smarts VoIP Availability Manager versions prior to 9.2
EMC Smarts Network Protocol Manager versions prior to 9.2
EMC Smarts MPLS Manager versions prior to 9.2
Description
The issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious code on the victim's browser.
Recommendations
For versions prior to 9.2, update to version 9.2 or later to resolve the issue.
As a temporary workaround, consider restricting access to the affected systems until a patch is available.
Avoid using crafted URLs that may exploit the XSS vulnerability until the issue is resolved.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Emc Smarts Ip Manager
Emc Smarts Mpls Manager
Emc Smarts Network Protocol Manager
Emc Smarts Server Manager
Emc Smarts Service Assurance Manager
Emc Smarts Voip Availability Manager