CVE-2012-6272
Dell Openmanage Server Administrator - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/index_main.htm in (1) help/sm/en/Output/wwhelp/wwhimpl/js/, (2) help/sm/es/Output/wwhelp/wwhimpl/js/, (3) help/sm/ja/Output/wwhelp/wwhimpl/js/, (4) help/sm/de/Output/wwhelp/wwhimpl/js/, (5) help/sm/fr/Output/wwhelp/wwhimpl/js/, (6) help/sm/zh/Output/wwhelp/wwhimpl/js/, (7) help/hip/en/msgguide/wwhelp/wwhimpl/js/, or (8) help/hip/en/msgguide/wwhelp/wwhimpl/common/.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Tenable NS · textremotemultiple
https://www.exploit-db.com/exploits/38179
Scores
EPSS
0.0111
EPSS Percentile
78.0%
Details
CWE
CWE-79
Status
published
Products (4)
dell/openmanage_server_administrator
dell/openmanage_server_administrator
dell/openmanage_server_administrator
n/a/n/a
Published
Jan 25, 2013
Tracked Since
Feb 18, 2026