medium6.1Public exploit code
CVE-2013-3320
Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the '…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NetApp OnCommand System Manager - '/zapiServlet' User Management Interface Multiple Cross-Site Scripting Vulnerabilities2013-05-07 · webapps · php · Verified
- NetApp OnCommand System Manager - '/zapiServlet' CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities2013-05-07 · webapps · php · Verified
Impact
Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Oncommand System Manager | before 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/59688
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84061
- http://www.securityfocus.com/bid/59688
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84061