8.8
High
CVE-2021-21549 Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS
Description
Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XtremIO | Versions not published |
Other CVEs of XtremIO
The 6 CVEs of XtremIO →
CVE-2025-30105
Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability
8.8
High
CVE-2022-31228
Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability
8.1
High
CVE-2019-18577
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability
6.7
Medium
CVE-2019-18578
Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability
9.0
Critical