CVE-2012-4955

Dell OMSA <6.5.0.1-7.1.0.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (8)

[Patch] http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=5JDN0&osCode=WNET&fileId=3082293694

[Patch] http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=JJMWP&osCode=WNET&fileId=3082295338

[Patch] http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/poweredge-r710?driverId=PCXMR&osCode=WNET&fileId=3082295344

[US Government Resource] http://www.kb.cert.org/vuls/id/558132

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/80071

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/56518

[Third Party Advisory, VDB Entry] http://osvdb.org/87405

[Third Party Advisory] http://secunia.com/advisories/51297

Scores

EPSS 0.0064

EPSS Percentile 70.3%

Details

CWE

CWE-79

Status published

Products (19)

dell/openmanage_server_administrator < 6.5.0

dell/openmanage_server_administrator

... and 9 more

Published Nov 15, 2012

Tracked Since Feb 18, 2026