Dell EMC Open Redirect (CVE-2021-21578)

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. This plugin only works with Tenable.ot...

CVE-2021-21577

Dell EMC iDRAC9 prior to 4.40.40.00 exposes a DOM-based cross-site scripting vulnerability in its web interface. A remote attacker could lure a user to a crafted link to execute malicious HTML/JavaScript in the victim’s browser. Root cause: DOM-based XSS in the iDRAC9 web UI. Affected product/ver...