title: Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer
description: Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
defaultStatus: unaffected
modules: Hitachi Ops Center Analyzer detail view
platforms: [Linux, 64 bit]
product: Hitachi Ops Center Analyzer
vendor: Hitachi
versions:
changes: [at: 10.9.2-00, status: unaffected], lessThan: 10.9.2-00, status: affected, version: 10.9.1-00, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL