CVE-2018-1187

MEDIUM 4.8CVE-2018-1187 · Published 26/03/2018 · updated 17/06/2026

In short

CVE-2018-1187 is a MEDIUM (CVSS 4.8) vulnerability affecting emc isilon (dell).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
emc isilon dell	`≥ 8.0.0.0, ≤ 8.0.0.6≥ 8.0.1.0, ≤ 8.0.1.2≥ 8.1.0.0, ≤ 8.1.0.1`	No fix yet

Description

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting vulnerability in the Network Configuration page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.

References

seclists.org/fulldisclosure/2018/Mar/50 · Mailing List
securityfocus.com/bid/103033 · Third Party Advisory
coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities · Exploit
exploit-db.com/exploits/44039 · Exploit

More vulnerabilities in emc isilon

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

emc isilon

dell

≥ 8.0.0.0, ≤ 8.0.0.6≥ 8.0.1.0, ≤ 8.0.1.2≥ 8.1.0.0, ≤ 8.1.0.1

No fix yet

Description

More vulnerabilities in emc isilon

See all →