Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-2171

SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a state_viewmodulelog action to the ModuleServlet URI.

CVSS 2.0 · 6.5 Medium EPSS 5.1% KEV · Not listed
Vendors
Ibm
Products
Ds4100 Ds4200 Ds4300 and 15 more
CVE-2012-2172

Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Ibm
Products
Ds4100 Ds4200 Ds4300 and 15 more