Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco HyperFlex Software Cross-Frame Scripting Vulnerability
Vulnerability Description
A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks.
CVSS Information
N/A
Vulnerability Type
保护机制失效
Vulnerability Title
Cisco HyperFlex Software 跨站脚本漏洞
Vulnerability Description
Cisco HyperFlex Software是美国思科（Cisco）公司的一套套可扩展的分布式文件系统。该系统通过云管理提供统一的计算、存储和网络，并提供企业级数据管理和优化服务。 Cisco HyperFlex Software 3.5.2f及之前版本和4.0.1b及之前版本中存在安全漏洞，该漏洞源于程序没有充分保护HTML iframe。远程攻击者可通过将用户重定向攻击者控制的带有恶意HTML iframe的Web页面利用该漏洞实施点击劫持攻击或进行其他客户端浏览器攻击。
CVSS Information
N/A
Vulnerability Type
N/A