Medium severity4.8NVD Advisory· Published Mar 26, 2018· Updated Jun 17, 2026
CVE-2018-1202
CVE-2018-1202
Description
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:dell:emc_isilon:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dell:emc_isilon:*:*:*:*:*:*:*:*range: >=8.0.0.0,<=8.0.0.6
- cpe:2.3:a:dell:emc_isilon:7.1.1.11:*:*:*:*:*:*:*
- Range: 7.1.1.11, 8.0.0.0-8.0.0.6, 8.0.1.0-8.0.1.2, 8.1.0.0-8.1.0.1
- Range: versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6 and version 7.1.1.11
Patches
Vulnerability mechanics
References
4- www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilitiesnvdExploitThird Party Advisory
- www.exploit-db.com/exploits/44039/nvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2018/Mar/50nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/103033nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.