CVE-2012-1842: Dell Powervault ML6000

Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Dell Powervault ML6000
• Dell Powervault ML6000 Firmware: version 585g.gs003 only
• Dell Powervault ML6010
• Dell Powervault ML6020
• Dell Powervault ML6030
• Quantum Scalar i500
• Quantum Scalar i500 Firmware: up to and including i7.0.2; version i2 only; version i3 only; version i3.1 only; version i4 only; version i5 only; …

Published 2012-03-22. Last modified 2026-06-16.