CVE-2018-1187: dell emc isilon onefs Cross-site Scripting
Vulnerability summary
CVE-2018-1187 is a medium (CVSS 4.8) Cross-site Scripting vulnerability in dell emc isilon onefs. EPSS estimates a 1.79% chance of exploitation in the next 30 days, higher than 78% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 26-03-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting vulnerability in the Network Configuration page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.79%
Chance of exploitation in the next 30 days
Percentile
78%
Versus all other CVEs
30-day change
0.00 pp
From 1.79% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (coresecurity.com)
Maturity: unknown
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Dell1 product
- emc_isilon≥ 8.0.0.0, ≤ 8.0.0.6 | ≥ 8.0.1.0, ≤ 8.0.1.2 | ≥ 8.1.0.0, ≤ 8.1.0.1
Dell emc1 product
- isilon onefsversions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6
2 vendors · 2 products
References
4 links- www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilitiesX Refsource MISCExploitThird Party Advisory