CVE-2015-1565 Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hitachi device manager | <= 8.1.1 | No fix listed |
| Hitachi replication manager | <= 8.1.1 | No fix listed |
| Hitachi tiered storage manager | <= 8.1.1 | No fix listed |
| Hitachi compute systems manager | <= 7.6.1 | No fix listed |
| Hitachi compute systems manager | = 8.0.0 | No fix listed |
| Hitachi compute systems manager | = 8.1.0 | No fix listed |
| Hitachi compute systems manager | = 8.1.1 | No fix listed |
| Hitachi global link manager | <= 8.1.1 | No fix listed |
References
- 62579 third-party-advisory
- 62584 third-party-advisory
- www.hitachi.co.jp vendor-advisory