CVE-2022-34451

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to hijack user sessions or trick a victim application user into unknowingly send arbitrary requests to the server.

Score

CVSS 3.1 4.8 Medium

Status

Modified - security_alert@emc.com

Published

2023-02-11

Last modified

2025-03-24

Weaknesses

CWE-79

Affected products

• Powerpath Management Appliance (Dell)

References

• https://www.dell.com/support/kbdoc/000205404