PT-2020-9890
CVE-2019-17276
·
تاريخ النشر
2020-03-24
·
تاريخ التحديث
2020-03-26
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OnCommand System Manager versions 9.3 prior to 9.3P18
OnCommand System Manager versions 9.4 prior to 9.4P2
Description
The issue is related to a cross-site scripting vulnerability. This could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field.
Recommendations
For OnCommand System Manager versions 9.3 prior to 9.3P18, update to version 9.3P18 or later.
For OnCommand System Manager versions 9.4 prior to 9.4P2, update to version 9.4P2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾