First published: Mon Mar 19 2018(Updated: )
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting vulnerability in the Network Configuration page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell EMC Isilon | >=8.0.0.0<=8.0.0.6 | |
Dell EMC Isilon | >=8.0.1.0<=8.0.1.2 | |
Dell EMC Isilon | >=8.1.0.0<=8.1.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Dell EMC Isilon vulnerability is CVE-2018-1187.
The affected versions of Dell EMC Isilon are between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6.
CVE-2018-1187 has a severity rating of 4.8, which is considered medium.
The CWE category of this vulnerability is CWE-79, which is related to Cross-Site Scripting (XSS).
To fix this vulnerability in Dell EMC Isilon, apply the necessary security patches or updates provided by Dell EMC.