medium4.7
CVE-2018-1246
Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability.
Impact
Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Unity Operating Environment | before 4.3.1.1525703027 |
| Dell | Emc Unityvsa Operating Environment | before 4.3.1.1525703027 |