CVE-2021-21576

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.

Score

CVSS 3.1 6.1 Medium

Status

Modified - security_alert@emc.com

Published

2021-08-03

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Emc Idrac9 Firmware (Dell)
• Integrated Dell Remote Access Controller Idrac (Dell)

References

• https://www.dell.com/support/kbdoc/000189193