Overview
Dell OpenManage Server Administrator version 7.1.0.1 and earlier contains a DOM-based cross-site scripting vulnerability.
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Dell OpenManage Server Administrator version 7.1.01 and earlier contains a DOM-based cross-site scripting vulnerability. |
Impact
A remote attacker may be able to execute arbitrary script in the context of the end-user's browser session. |
Solution
Apply an update |
Restrict Access |
Vendor Information
The vulnerability reporter has confirmed that Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1 and 7.1.0.1 are affected by this vulnerability. |
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 5 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| Temporal | 3.6 | E:U/RL:W/RC:UC |
| Environmental | 1.4 | CDP:LM/TD:L/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
Thanks to Tenable Network Security for reporting this vulnerability.
This document was written by Michael Orlando.
Other Information
| CVE IDs: | CVE-2012-6272 |
| Date Public: | 2013-01-09 |
| Date First Published: | 2013-01-09 |
| Date Last Updated: | 2015-09-17 19:55 UTC |
| Document Revision: | 7 |