Not rated
CVE-2018-1461 IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1,…
Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140362.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Virtualize Software 8.1 | 8.1 → 8.1.1 | No fix stated |
| Spectrum Virtualize Software 7.8 | 7.8 → 7.8.1 | No fix stated |
| Spectrum Virtualize Software 7.7 | 7.7 → 7.7.1 | No fix stated |
| Spectrum Virtualize Software 7.6 | 7.6 → 7.6.1 | No fix stated |
| Spectrum Virtualize Software | 7.5 | No fix stated |
| Spectrum Virtualize Software | 7.4 | No fix stated |
| Spectrum Virtualize Software | 7.3 | No fix stated |
| Spectrum Virtualize Software | 7.2 | No fix stated |
| Spectrum Virtualize Software | 7.1 | No fix stated |
Show the 93 other branches Hide the 93 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Virtualize Software | 6.4 | No fix stated |
| Spectrum Virtualize Software | 6.3 | No fix stated |
| Spectrum Virtualize Software | 6.2 | No fix stated |
| Spectrum Virtualize Software | 6.1 | No fix stated |
| Storwize V5000 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V5000 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V5000 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V5000 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V5000 | 7.5 | No fix stated |
| Storwize V5000 | 7.4 | No fix stated |
| Storwize V5000 | 7.3 | No fix stated |
| Storwize V5000 | 7.2 | No fix stated |
| Storwize V5000 | 7.1 | No fix stated |
| Storwize V5000 | 6.4 | No fix stated |
| Storwize V5000 | 6.3 | No fix stated |
| Storwize V5000 | 6.2 | No fix stated |
| Storwize V5000 | 6.1 | No fix stated |
| Storwize V3500 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V3500 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V3500 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V3500 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V3500 | 7.5 | No fix stated |
| Storwize V3500 | 7.4 | No fix stated |
| Storwize V3500 | 7.3 | No fix stated |
| Storwize V3500 | 7.2 | No fix stated |
| Storwize V3500 | 7.1 | No fix stated |
| Storwize V3500 | 6.4 | No fix stated |
| Storwize V3500 | 6.3 | No fix stated |
| Storwize V3500 | 6.2 | No fix stated |
| Storwize V3500 | 6.1 | No fix stated |
| Storwize V7000 (2076) 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V7000 (2076) 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V7000 (2076) 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V7000 (2076) 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V7000 (2076) | 7.5 | No fix stated |
| Storwize V7000 (2076) | 7.4 | No fix stated |
| Storwize V7000 (2076) | 7.3 | No fix stated |
| Storwize V7000 (2076) | 7.2 | No fix stated |
| Storwize V7000 (2076) | 7.1 | No fix stated |
| Storwize V7000 (2076) | 6.4 | No fix stated |
| Storwize V7000 (2076) | 6.3 | No fix stated |
| Storwize V7000 (2076) | 6.2 | No fix stated |
| Storwize V7000 (2076) | 6.1 | No fix stated |
| Storwize V7000 (2076) | 1.1 | No fix stated |
| Storwize V3700 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V3700 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V3700 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V3700 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V3700 | 7.5 | No fix stated |
| Storwize V3700 | 7.4 | No fix stated |
| Storwize V3700 | 7.3 | No fix stated |
| Storwize V3700 | 7.2 | No fix stated |
| Storwize V3700 | 7.1 | No fix stated |
| Storwize V3700 | 6.4 | No fix stated |
| Storwize V3700 | 6.3 | No fix stated |
| Storwize V3700 | 6.2 | No fix stated |
| Storwize V3700 | 6.1 | No fix stated |
| FlashSystem V9000 8.1 | 8.1 → 8.1.1 | No fix stated |
| FlashSystem V9000 7.8 | 7.8 → 7.8.1 | No fix stated |
| FlashSystem V9000 7.7 | 7.7 → 7.7.1 | No fix stated |
| FlashSystem V9000 7.6 | 7.6 → 7.6.1 | No fix stated |
| FlashSystem V9000 | 7.5 | No fix stated |
| FlashSystem V9000 | 7.4 | No fix stated |
| FlashSystem V9000 | 7.3 | No fix stated |
| FlashSystem V9000 | 7.2 | No fix stated |
| FlashSystem V9000 | 7.1 | No fix stated |
| FlashSystem V9000 | 6.4 | No fix stated |
| FlashSystem V9000 | 6.3 | No fix stated |
| FlashSystem V9000 | 6.2 | No fix stated |
| FlashSystem V9000 | 6.1 | No fix stated |
| SAN Volume Controller | 8.1 | No fix stated |
| SAN Volume Controller 7.8 | 7.8 → 7.8.1 | No fix stated |
| SAN Volume Controller 7.7 | 7.7 → 7.7.1 | No fix stated |
| SAN Volume Controller 7.6 | 7.6 → 7.6.1 | No fix stated |
| SAN Volume Controller | 7.5 | No fix stated |
| SAN Volume Controller | 7.1 | No fix stated |
| SAN Volume Controller | 6.4 | No fix stated |
| SAN Volume Controller | 6.3 | No fix stated |
| SAN Volume Controller | 6.2 | No fix stated |
| SAN Volume Controller | 6.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 8.1 | 8.1 → 8.1.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 7.8 | 7.8 → 7.8.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 7.7 | 7.7 → 7.7.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 7.6 | 7.6 → 7.6.1 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.5 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.4 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.3 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.2 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.1 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.4 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.3 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.2 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.1 | No fix stated |
Other CVEs of Spectrum Virtualize Software
The 9 CVEs of Spectrum Virtualize Software →
CVE-2021-29873
IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service…
8.8
High
CVE-2018-1775
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2…
6.5
Medium
CVE-2018-1462
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1,…
Not rated
CVE-2018-1434
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1,…
Not rated