CVE-2012-2172

published 2012-06-22

CVE-2012-2172: Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18…

Priority P4 23 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

EXPLOIT

Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
ibm	ds4100	—	—
ibm	ds4200	—	—
ibm	ds4300	—	—
ibm	ds4400	—	—
ibm	ds4500	—	—
ibm	ds4700	—	—
ibm	ds4800	—	—
ibm	ds_storage_manager_host_software	<= 10.83	—
ibm	ds_storage_manager_host_software	—	—
ibm	ds_storage_manager_host_software	—	—
ibm	system_storage_dcs3700_storage_subsystem	—	—
ibm	system_storage_ds3200	—	—
ibm	system_storage_ds3300	—	—
ibm	system_storage_ds3400	—	—
ibm	system_storage_ds3512	—	—
ibm	system_storage_ds3524	—	—
ibm	system_storage_ds3950_express	—	—
ibm	system_storage_ds5020_disk_controller	—	—
ibm	system_storage_ds5100_storage_controller	—	—
ibm	system_storage_ds5300_storage_controller	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79