CVE-2015-1565: XSS
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1565?
CVE-2015-1565 is classified as a high severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-1565?
To mitigate CVE-2015-1565, upgrade to Hitachi Device Manager, Replication Manager, Tiered Storage Manager, Global Link Manager version 8.1.2-00 or later, and Compute Systems Manager version 7.6.1-08 or later.
Which versions are affected by CVE-2015-1565?
CVE-2015-1565 affects Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager versions prior to 8.1.2-00, and Compute Systems Manager versions prior to 7.6.1-08 and 8.x prior to 8.1.2-00.
Is CVE-2015-1565 exploitable remotely?
Yes, CVE-2015-1565 is exploitable remotely, allowing attackers to execute cross-site scripting attacks.
What kind of attacks can CVE-2015-1565 facilitate?
CVE-2015-1565 can facilitate cross-site scripting (XSS) attacks, potentially allowing attackers to steal session cookies or perform actions on behalf of users.