5.4
Moyenne
CVE-2023-44301 Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability
Description
Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell PowerProtect Data Manager DM5500 Appliance | Versions non publiées |
Autres CVE de Dell PowerProtect Data Manager DM5500 Appliance
Les 7 CVE de Dell PowerProtect Data Manager DM5500 Appliance →
CVE-2023-44302
Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability
8.1
Élevée
CVE-2023-44300
Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance
5.5
Moyenne
CVE-2023-44306
Dell DM5500 contains a path traversal vulnerability in the appliance
6.5
Moyenne
CVE-2023-44305
Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance
8.1
Élevée