Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-96705
HistoryDec 07, 2023 - 12:00 a.m.

Dell DM5500 Cross-Site Scripting Vulnerability

2023-12-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
dell dm5500
cross-site scripting
data protection
multi-cloud
vulnerability

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute malicious HTML or JavaScript code in the victim user’s web browser, resulting in information disclosure, session theft, or client request forgery.

CPENameOperatorVersion
dell dm5500 <=5.eq14.0.0

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

Related for CNVD-2023-96705