Vulnerability Details CVE-2017-14383
In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary HTML code in the user's browser session in the context of the affected web application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2017-14383
-
cpe:2.3:h:dell:emc_vnx1:-
-
cpe:2.3:h:dell:emc_vnx2:-
-
cpe:2.3:o:dell:emc_vnx1_firmware:*
-
cpe:2.3:o:dell:emc_vnx2_firmware:*