CVE-2025-2141

MEDIUM

6.1

Descricao

IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Detalhes CVE

Pontuacao CVSS v3.16.1

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado7/1/2025

Ultima modificacao9/30/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

ibm:3948-vedibm:3948-ved_firmwareibm:3948-vefibm:3948-vef_firmwareibm:3957-vedibm:3957-ved_firmware

Fraquezas (CWE)

CWE-79

Referencias

https://www.ibm.com/support/pages/node/7238556(psirt@us.ibm.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.