CVE:CVE-2012-1842
CNNVD:CNNVD-201203-442
Quantum Scalar i500磁带库固件i7.0.3 (604G.GS00100)之前版本，和Dell ML6000磁带库固件A20-00 (590G.GS00100)之前版本中的checkQKMProg.htm中存在跨站脚本漏洞（XSS）。远程攻击者可利用该漏洞借助未明向量，注入任意web脚本或HTML。
solution:Upgrade quantum scalar_i500_firmware to a higher version than i7.0.2,i2,i3,i3.1,i4,i5,i5.1,i6,i6.1,i7,i7.0.1,sp4,sp4.2,and avoid the version (,i7.0.2],i2,i3,i3.1,i4,i5,i5.1,i6,i6.1,i7,i7.0.1,sp4,sp4.2; Upgrade quantum scalar_i500 to a higher version than 5u,14u,23u,and avoid the version 5u,14u,23u; Upgrade dell powervault_ml6000_firmware to a higher version than 585g.gs003,and avoid the version 585g.gs003; Upgrade dell powervault_ml6000 to a higher version than 32u,41u,and avoid the version 32u,41u; Upgrade dell powervault_ml6010 to a higher version than 5u,and avoid the version 5u; Upgrade dell powervault_ml6020 to a higher version than 14u,and avoid the version 14u; Upgrade dell powervault_ml6030 to a higher version than 23u,and avoid the version 23u