NVD

Id
44014  
Name
CVE-2012-2172  
Description
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-06-22  
Modified Date
2012-06-22  
Seq
2012-2172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221232 44014 CVE-2012-2172 http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172  View
221233 44014 CVE-2012-2172 http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt  View
221234 44014 CVE-2012-2172 ssds-multiple-mp-xss(75239)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27150 JVNDB-2012-002857 IBM System Storage DS Storage Manager におけるクロスサイトスクリプティングの脆弱性 IBM System Storage DS シリーズデバイス上で稼働する IBM System Storage DS Storage Manager の Storage Manager Profiler 内の SoftwareRegistration.do には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2172 55410 CVE-2012-2172 44014 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002857.html 2012-06-20 2012-06-26 View