Lucene search

K
cvelistCertccCVELIST:CVE-2013-3589
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3589

2022-10-0316:14:46
certcc
www.cve.org
1
cve-2013-3589
cross-site scripting
dell idrac6
dell idrac7
firmware
errormsg parameter
remote attackers

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

Related for CVELIST:CVE-2013-3589