Description (CNA)
Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generating a certificate. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / Integrated Dell Remote Access Controller (iDRAC) | affected unspecified before 4.40.10.00 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.