Описание
Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Уязвимые конфигурации
Конфигурация 1Версия до 4.1.0 (исключая)
cpe:2.3:a:dell:openmanage_enterprise:*:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00198
Низкий
5.1 Medium
CVSS3
4.8 Medium
CVSS3
Дефекты
CWE-79
CWE-79
Связанные уязвимости
CVSS3: 5.1
github
почти 2 года назад
Dell OpenManage Enterprise, versions prior to 4.1.0, contains an XSS injection vulnerability in UI. A high privileged local attacker could potentially exploit this vulnerability, leading to JavaScript injection.
EPSS
Процентиль: 42%
0.00198
Низкий
5.1 Medium
CVSS3
4.8 Medium
CVSS3
Дефекты
CWE-79
CWE-79