Description
Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (10)
Core 10
Core References
Various Sources x_refsource_confirm
http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01258
Various Sources x_refsource_confirm
http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01257
Vendor Advisory x_refsource_confirm
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_the_help_link_on_the_power_hmc_login_panel_is_susceptible_to_reflected_cross_site_scripting_cve_2012_329617
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/50376
Various Sources x_refsource_confirm
http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01253
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77288
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1MB03489
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1MB03488
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1MB03494
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1027433
Scores
EPSS
0.0165
EPSS Percentile
74.0%
Details
CWE
CWE-79
Status
published
Products (3)
ibm/power_hardware_management_console
7r7.1.0 (5 CPE variants)
ibm/power_hardware_management_console
7r7.2.0 (3 CPE variants)
ibm/power_hardware_management_console
7r7.3.0
Published
Aug 17, 2012
Tracked Since
Feb 18, 2026