CVE-2018-1201: XSS
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1201?
CVE-2018-1201 is a cross-site scripting vulnerability in Dell EMC Isilon versions 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6, 7.2.1.x, and 7.1.1.11.
How severe is CVE-2018-1201?
CVE-2018-1201 has a severity score of 4.8, which is considered medium.
What is affected by CVE-2018-1201?
Dell EMC Isilon versions 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6, 7.2.1.x, and 7.1.1.11 are affected by CVE-2018-1201.
How can I fix CVE-2018-1201?
To fix CVE-2018-1201, upgrade to a version of Dell EMC Isilon that is not affected by the vulnerability.
Where can I find more information about CVE-2018-1201?
You can find more information about CVE-2018-1201 at the following references: [http://seclists.org/fulldisclosure/2018/Mar/50](http://seclists.org/fulldisclosure/2018/Mar/50), [http://www.securityfocus.com/bid/103033](http://www.securityfocus.com/bid/103033), [https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities](https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities).