CVE-2013-0936

EUVD-2013-0947 · Published Mar 28, 2013

Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Technologies

Emc Smarts Mpls ManagerEmc Smarts Network Protocol ManagerEmc Smarts Ip ManagerEmc Smarts Server ManagerEmc Smarts Services Assurance ManagerEmc Smarts Voip Availability Manager

Weaknesses

CWE-79

CVSS scores

v2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://archives.neohapsis.com/archives/bugtraq/2013-03/0152.html

Potentially impacted assets

See if this affects your attack surface