CVE-2018-1188

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-site scripting vulnerability in the Authorization Providers page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Dell EMC	Isilon OneFS	versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6, versions 7.2.1.x

References

http://seclists.org/fulldisclosure/2018/Mar/50Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/103033Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilitiesExploit, Third Party Advisory
https://www.exploit-db.com/exploits/44039/Exploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Mar/50Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/103033Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilitiesExploit, Third Party Advisory
https://www.exploit-db.com/exploits/44039/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 26, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-118807.8Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 CVE-2018-118827.8Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA6 CVE-2018-118837.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in policy mgr unit test if mode CVE-2018-118847.8Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in ve CVE-2018-118867.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check while calculating CVE-2018-118887.8Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Com CVE-2018-118897.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when requesting rssi timeout, ac CVE-2018-11894.8Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affe CVE-2018-118918.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on the length of a CVE-2018-118937.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing vendor scan req CVE-2018-118947.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred netwo CVE-2018-118957.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation