CVE-2019-18588

🗓️ 10 Jan 2020 18:20:11Reported by dellType

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users' sessions

Reporter	Title	Published	Views	Family All 6
CNVD	Dell EMC Unisphere for PowerMax Cross-Site Scripting Vulnerability	23 Dec 201900:00	–	cnvd
Cvelist	CVE-2019-18588	10 Jan 202018:20	–	cvelist
EUVD	EUVD-2019-8334	7 Oct 202500:30	–	euvd
NVD	CVE-2019-18588	10 Jan 202019:15	–	nvd
Prion	Cross site scripting	10 Jan 202019:15	–	prion
Symantec	Multiple Dell EMC Products CVE-2019-18588 Cross Site Scripting Vulnerability	19 Dec 201900:00	–	symantec

NVD

Vulners

Node

dell emc_powermaxMatch5978.221.221

dell emc_powermaxMatch5978.479.479

dell emc_unisphere_for_powermaxRange<9.0.2.16

dell emc_unisphere_for_powermaxRange9.1.0.0–9.1.0.9

[
  {
    "product": "Unisphere for PowerMax",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "9.1.0.9 and 9.0.2.16",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/security/en-us/details/539808/DSA-2019-193-Dell-EMC-Unisphere-for-PowerMax-and-Dell-EMC-PowerMax-Embedded-Management-Cross-Site

21 Nov 2024 04:33Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 3.15.4

CVSS 39

EPSS0.00441

CWE-79