{"api_version":"1","generated_at":"2026-07-23T20:30:53+00:00","cve":"CVE-2012-2172","urls":{"html":"https://cve.report/CVE-2012-2172","api":"https://cve.report/api/cve/CVE-2012-2172.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-2172","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-2172"},"summary":{"title":"CVE-2012-2172","description":"Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.","state":"PUBLISHED","assigner":"ibm","published_at":"2012-06-22 10:24:07","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172","name":"http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM Blogs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt","name":"http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75239","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75239","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2172","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2172","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4100","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4100","cpe6":"1724","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4200","cpe6":"1814","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4300","cpe6":"1722","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4400","cpe6":"1742","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4500","cpe6":"1742","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4700","cpe6":"1814","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"ds4800","cpe6":"1815","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"ds_storage_manager_host_software","cpe6":"10.60.x5.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"ds_storage_manager_host_software","cpe6":"10.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"10.83","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"ds_storage_manager_host_software","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_dcs3700_storage_subsystem","cpe6":"1818","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds3200","cpe6":"1726","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds3300","cpe6":"1726","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds3400","cpe6":"1726","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds3512","cpe6":"1746","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds3524","cpe6":"1746","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds3950_express","cpe6":"1814","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds5020_disk_controller","cpe6":"1814-20a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds5100_storage_controller","cpe6":"1818","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2172","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ibm","cpe5":"system_storage_ds5300_storage_controller","cpe6":"1818","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T19:26:08.416Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt"},{"name":"ssds-multiple-mp-xss(75239)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75239"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-06-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt"},{"name":"ssds-multiple-mp-xss(75239)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75239"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2012-2172","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt","refsource":"MISC","url":"http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt"},{"name":"ssds-multiple-mp-xss(75239)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75239"},{"name":"http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172","refsource":"CONFIRM","url":"http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2012-2172","datePublished":"2012-06-22T10:00:00.000Z","dateReserved":"2012-04-04T00:00:00.000Z","dateUpdated":"2024-08-06T19:26:08.416Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-06-22 10:24:07","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:ds_storage_manager_host_software:*:*:*:*:*:*:*:*","versionEndIncluding":"10.83","matchCriteriaId":"C3019D7A-C9A4-48D9-BAE9-E03ED79A184F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:ds_storage_manager_host_software:10.8:*:*:*:*:*:*:*","matchCriteriaId":"52489840-0CBD-4B10-AA5C-77FBD52D2A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:ds_storage_manager_host_software:10.60.x5.14:*:*:*:*:*:*:*","matchCriteriaId":"9752934B-9CFD-4233-885A-63F80F0B2766"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4100:*:*:*:*:*:*:*:*","matchCriteriaId":"A70E5F14-9F22-4263-B9E2-5CADBCE1BE52"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4100:1724:*:*:*:*:*:*:*","matchCriteriaId":"CE202F3C-2971-492B-9263-4EEEA5762592"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4200:1814:*:*:*:*:*:*:*","matchCriteriaId":"5BC0E7FA-32C0-4C26-AE27-9500E674847B"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4300:1722:*:*:*:*:*:*:*","matchCriteriaId":"2A9D7E15-763E-4443-81DA-94418D5643E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4400:1742:*:*:*:*:*:*:*","matchCriteriaId":"CF34B72A-9608-4883-A2A2-629125D163B2"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4500:1742:*:*:*:*:*:*:*","matchCriteriaId":"03D296A9-E67C-449E-B774-FF20A8333187"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4700:1814:*:*:*:*:*:*:*","matchCriteriaId":"75BC52EE-EB60-4C18-9987-36CAE56F67D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4800:1815:*:*:*:*:*:*:*","matchCriteriaId":"38291A79-ED22-45ED-80B1-B98F2F92BA66"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_dcs3700_storage_subsystem:1818:*:*:*:*:*:*:*","matchCriteriaId":"8BDC1691-A4B4-4AE4-A19C-BA2FDF0C28E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds3200:1726:*:*:*:*:*:*:*","matchCriteriaId":"B78F6585-8890-477B-AA4F-1A4092DD6F43"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds3300:1726:*:*:*:*:*:*:*","matchCriteriaId":"69A41183-73AA-4148-90E8-2D34A70E4A9C"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds3400:1726:*:*:*:*:*:*:*","matchCriteriaId":"9A509484-6D73-4F0F-B996-94EF58E36010"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds3512:1746:*:*:*:*:*:*:*","matchCriteriaId":"48750AB0-08B3-4A60-8102-7BEFB985FB1F"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds3524:1746:*:*:*:*:*:*:*","matchCriteriaId":"CDF9BE45-D6D6-410E-BABB-A834D33A52A8"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds3950_express:1814:*:*:*:*:*:*:*","matchCriteriaId":"CA4ABA37-8B79-414F-9510-458DF0C1064C"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds5020_disk_controller:1814-20a:*:*:*:*:*:*:*","matchCriteriaId":"7D7EA1B8-EC32-444B-9485-F6EFE1B6DD20"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds5100_storage_controller:1818:*:*:*:*:*:*:*","matchCriteriaId":"979FD97C-0E37-43C9-AB2F-F79FCE15D135"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:system_storage_ds5300_storage_controller:1818:*:*:*:*:*:*:*","matchCriteriaId":"3BAC221F-B825-418F-BE80-BB7A074E346F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"2172","Ordinal":"1","Title":"CVE-2012-2172","CVE":"CVE-2012-2172","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"2172","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.","Type":"Description","Title":"CVE-2012-2172"},{"CveYear":"2012","CveId":"2172","Ordinal":"2","NoteData":"2012-06-22","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"2172","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}