Medium severity4.7NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026

CVE-2018-1246

Description

Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser.

Affected products

EMC Corporation/Unityllm-create
Dell/UnityVSAllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: unspecified
Dell/EMC Unitycpe-rescue
Range: unspecified
Dell/Emc Unity Operating Environment
cpe:2.3:a:dell:emc_unity_operating_environment:*:*:*:*:*:*:*:*
Range: <4.3.1.1525703027
Dell/Emc Unityvsa Operating Environment
cpe:2.3:a:dell:emc_unityvsa_operating_environment:*:*:*:*:*:*:*:*
Range: <4.3.1.1525703027

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2018/Sep/30nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000