medium4.3
CVE-2015-1565
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager bef…
Impact
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Device Manager | through 8.1.1 |
| Hitachi | Replication Manager | through 8.1.1 |
| Hitachi | Tiered Storage Manager | through 8.1.1 |
| Hitachi | Compute Systems Manager | through 7.6.1 Versions 8.0.0, 8.1.0, 8.1.1 |
| Hitachi | Global Link Manager | through 8.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/62579
- http://secunia.com/advisories/62584
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.html
- http://secunia.com/advisories/62579
- http://secunia.com/advisories/62584
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.html