5.4
Medium
CVE-2023-44301 Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability
Description
Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell PowerProtect Data Manager DM5500 Appliance | Versions not published |
Other CVEs of Dell PowerProtect Data Manager DM5500 Appliance
The 7 CVEs of Dell PowerProtect Data Manager DM5500 Appliance →
CVE-2023-44302
Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability
8.1
High
CVE-2023-44300
Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance
5.5
Medium
CVE-2023-44306
Dell DM5500 contains a path traversal vulnerability in the appliance
6.5
Medium
CVE-2023-44305
Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance
8.1
High