Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mvh-8j4j-qmwp

Опубликовано: 01 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.1

Описание

Dell OpenManage Enterprise, versions prior to 4.1.0, contains an XSS injection vulnerability in UI. A high privileged local attacker could potentially exploit this vulnerability, leading to JavaScript injection.

Dell OpenManage Enterprise, versions prior to 4.1.0, contains an XSS injection vulnerability in UI. A high privileged local attacker could potentially exploit this vulnerability, leading to JavaScript injection.

EPSS

Процентиль: 42%
0.00198
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 5.1
nvd
почти 2 года назад

Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

EPSS

Процентиль: 42%
0.00198
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-20
CWE-79