CVEvulnerability

CVE-2018-21033

6.5 MEDIUM Published 2020-02-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 3.0 ([email protected])
5.0 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-20

Description

A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.

Affected configurations

• hitachi device manager (< 8.6.2-00) • hitachi compute systems manager (< 8.6.2-00) • hitachi automation director (< 8.6.2-00) • hitachi tiered storage manager (< 8.6.2-00) • hitachi replication manager (< 8.6.2-00) • hitachi tuning manager (< 8.6.2-00) • hitachi global link manager (< 8.6.2-00) • hitachi infrastructure analytics advisor (< 4.2.0-00)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References