6.2
Medium
CVE-2020-5317 Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability
Description
Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic Cloud Storage 3.4 | earliest → < 3.4.0.1 | 3.4.0.1 |
Other CVEs of Elastic Cloud Storage
The 4 CVEs of Elastic Cloud Storage →
CVE-2026-28261
Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version…
7.8
High
CVE-2020-5386
Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability
8.1
High
CVE-2019-3766
Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts…
8.1
High