← Database
CVE-2024-45094
MEDIUM
CVSS: 5.5
Published: 2025-05-27
Modified: 2026-06-17
Description
IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Platforms
Ibm Hardware Management Console R9.4 FirmwareIbm Hardware Management Console R9.3Ibm Hardware Management Console R9.3 FirmwareIbm Hardware Management Console R10.0Ibm Hardware Management Console R9.4Ibm Hardware Management Console R10.0 Firmware