Description (CNA)
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users access the page through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / Integrated Data Protection Appliance | affected prior to 2.3 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.