CVE-2012-1842

Published: Mar 22, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (22)

Products: Quantum: Scalar I500 Firmware, Scalar I500 · Dell: Powervault Ml6000 Firmware, Powervault Ml6000, Powervault Ml6010, Powervault Ml6020, Powervault Ml6030

2 products

5 products

Powervault Ml6000 Firmware

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Quantum Scalar I500 Firmware	Up to i7.0.2
Quantum Scalar I500 Firmware	Version i2
Quantum Scalar I500 Firmware	Version i3.1
Quantum Scalar I500 Firmware	Version i3
Quantum Scalar I500 Firmware	Version i4
Quantum Scalar I500 Firmware	Version i5.1
Quantum Scalar I500 Firmware	Version i5
Quantum Scalar I500 Firmware	Version i6.1
Quantum Scalar I500 Firmware	Version i6
Quantum Scalar I500 Firmware	Version i7.0.1
Quantum Scalar I500 Firmware	Version i7
Quantum Scalar I500 Firmware	Version sp4.2
Quantum Scalar I500 Firmware	Version sp4
Quantum Scalar I500	Version 14u
Quantum Scalar I500	Version 23u
Quantum Scalar I500	Version 5u

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Dell Powervault Ml6000 Firmware	Version 585g.gs003
Dell Powervault Ml6000	Version 32u
Dell Powervault Ml6000	Version 41u
Dell Powervault Ml6010	Version 5u
Dell Powervault Ml6020	Version 14u
Dell Powervault Ml6030	Version 23u