4.8
Moyenne
CVE-2021-21542 Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities
Description
Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generating a certificate. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Integrated Dell Remote Access Controller (iDRAC) 4.40 | premières → < 4.40.10.00 | 4.40.10.00 |
Autres CVE de Integrated Dell Remote Access Controller (iDRAC)
Les 24 CVE de Integrated Dell Remote Access Controller (iDRAC) →
CVE-2021-36348
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability
5.9
Moyenne
CVE-2021-36347
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow…
6.2
Moyenne
CVE-2021-36346
Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability
5.3
Moyenne
CVE-2021-36301
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in…
5.9
Moyenne