Описание
Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.
Уязвимые конфигурации
Конфигурация 1Версия до 7.2 (исключая)
Одно из
cpe:2.3:a:dell:emc_sourceone:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:-:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp1:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp2:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp3:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp4:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp5:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp6:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp7:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp8:*:*:*:*:*:*
cpe:2.3:a:dell:emc_sourceone:7.2:sp9:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00256
Низкий
9 Critical
CVSS3
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.
EPSS
Процентиль: 49%
0.00256
Низкий
9 Critical
CVSS3
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
CWE-79