PT-2013-2730 · Emc · Emc Smarts Ip Manager+5

Published 2013-03-28 · Updated 2013-03-29 · CVE-2013-0936

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMC Smarts IP Manager versions prior to 9.2 EMC Smarts Service Assurance Manager versions prior to 9.2 EMC Smarts Server Manager versions prior to 9.2 EMC Smarts VoIP Availability Manager versions prior to 9.2 EMC Smarts Network Protocol Manager versions prior to 9.2 EMC Smarts MPLS Manager versions prior to 9.2

Description The issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious code on the victim's browser.

Recommendations For versions prior to 9.2, update to version 9.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected systems until a patch is available. Avoid using crafted URLs that may exploit the XSS vulnerability until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-0936

Affected Products

Emc Smarts Ip Manager

Emc Smarts Mpls Manager

Emc Smarts Network Protocol Manager

Emc Smarts Server Manager

Emc Smarts Service Assurance Manager

Emc Smarts Voip Availability Manager

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-0936 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2013-03/0152.html · Note