CVE-2016-6641
HighSummary
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before version 3.7.2 allows remote authenticated users to inject arbitrary web scripts or HTML via unspecified vectors.
Risk Assessment
An attacker could exploit this vulnerability to hijack user sessions or steal data, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to upgrade EMC ViPR SRM to version 3.7.2 or later to mitigate this vulnerability.
Other vulnerabilities in EMC ViPR SRM
See all- CVE-2016-0891High
Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before version 3.7 allow remote attackers to hijack the authentication of administrators.
- CVE-2016-0922Critical
EMC ViPR SRM versions before 3.7.2 do not restrict the number of password-authentication attempts, making it easier for remote attackers to gain access via a brute-force guessing attack.
Original NVD description (English source)
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.