CVE-2018-1189: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2....

Security readout for executives and security teams

CVE-2018-1189 is a cross-site scripting flaw in Dell EMC Isilon OneFS. A malicious administrator could place HTML or JavaScript into the Antivirus Page, causing code to run in another user's browser inside the OneFS administration site. Exposure is mainly organizations running affected Isilon OneFS versions with access to the web administration interface. Risk increases where many administrators exist, admin roles are broadly assigned, or the management interface is reachable from less-trusted networks. Treat this as a targeted administrative-console risk, not an internet-scale emergency. Prioritize remediation for affected storage clusters, especially where admin access is shared, delegated, or reachable outside a tightly controlled management network. Mitigation focus: Check Dell EMC DSA-2018-018 for fixed OneFS versions and upgrade guidance.; Restrict OneFS web administration access to trusted management networks.; Review and minimize administrator accounts with Antivirus Page access..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.