CVE:CVE-2018-1246
CNNVD:CNNVD-201809-1287
Dell EMC Unity Operating Environment（OE）是美国戴尔（Dell）公司的一套使用在EMC Unity存储系统中的操作环境。UnityVSA是它的另一版本。
Dell EMC Unity OE和OE UnityVSA中存在跨站脚本漏洞。远程攻击者可通过诱使用户向Unisphere提交恶意的HTML或Java Script代码利用该漏洞在用户的Web浏览器中执行代码。
solution:Upgrade dell emc_unity_operating_environment to a higher version than 4.3.1.1525703027,and avoid the version (,4.3.1.1525703027); Upgrade dell emc_unityvsa_operating_environment to a higher version than 4.3.1.1525703027,and avoid the version (,4.3.1.1525703027)