CVE-2012-3296: XSS
Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3296?
CVE-2012-3296 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-3296?
To fix CVE-2012-3296, upgrade your IBM Power Hardware Management Console to version 7R7.1.0 SP4 or higher, 7R7.2.0 SP2 or higher, or 7R7.3.0.
Who is affected by CVE-2012-3296?
CVE-2012-3296 affects IBM Power Hardware Management Console versions 7R7.1.0, 7R7.2.0, and 7R7.3.0, specifically before their respective service packs.
What type of attack can be executed using CVE-2012-3296?
CVE-2012-3296 can allow remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.
What is the initial release date of CVE-2012-3296?
CVE-2012-3296 was initially published on July 9, 2012.