Unscored severity · published Aug 17, 2012
CVE-2012-3296
Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Power Hardware Management Console · Ibm
7r7.1.0; 7r7.1.0; 7r7.1.0; 7r7.1.0; 7r7.1.0; 7r7.2.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3296
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3296
secunia.com
http://secunia.com/advisories/50376
Vendor Advisory
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_the_help_link_on_the_power_hmc_login_panel_is_susceptible_to_reflected_cross_site_scripting_cve_2012_329617
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=isg1MB03488
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=isg1MB03489
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=isg1MB03494
www.ibm.com
http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01253
More from Power Hardware Management Console
7.8
CVE-2025-1950
IBM Hardware Management Console - Power Systems command execution
7.8
CVE-2017-1134
IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access
6.7
CVE-2025-1951
IBM Hardware Management Console - Power Systems command execution
6.5
CVE-2024-56477
IBM Power Hardware Management Console directory traversal
6.1
CVE-2014-0883
IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting