CVE-2017-8024

MEDIUM

EMC Isilon OneFS < 8.1.0.1, < 8.0.1.2, < 8.0.0.6, 7.2.1.x - Reflected Cross-Site Scripting

Title source: llm
STIX 2.1

Description

EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system.

References (1)

Core 1
Core References
Mailing List, Patch, Third Party Advisory x_refsource_confirm
http://seclists.org/fulldisclosure/2017/Oct/34

Scores

CVSS v3 6.1
EPSS 0.0024
EPSS Percentile 47.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (9)
emc/isilon_onefs 7.2.1.0
emc/isilon_onefs 7.2.1.1
emc/isilon_onefs 7.2.1.2
emc/isilon_onefs 7.2.1.3
emc/isilon_onefs 7.2.1.4
emc/isilon_onefs 7.2.1.5
emc/isilon_onefs 7.2.1.6
emc/isilon_onefs < 8.1.0.0
n/a/EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneFS versions prior to 8.0.0.6, EMC Isilon OneFS 7.2.1.x EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.
Published Oct 18, 2017
Tracked Since Feb 18, 2026