PT-2021-14624

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.40.40.00 Description The issue allows a remote unauthenticated attacker to redirect users to arbitrary web URLs by tricking victim users into clicking on maliciously crafted links. This is achieved through a...

CVE-2021-21580: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21579: URL Redirection to Untrusted Site

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links...

CVE-2021-21578: URL Redirection to Untrusted Site

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links...

CVE-2021-21576: Improper Neutralization of Input During Web Page Generation

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link...

Dell EMC iDRAC9 输入验证错误漏洞

DELL Dell EMC iDRAC9 is a hardware and software-based system management solution from Dell DELL. Dell EMC iDRAC9 4.40.40.00 and earlier versions contain a security vulnerability. A remote attacker could exploit the vulnerability to trick victim users into clicking on a maliciously crafted link th...

DELL Dell EMC iDRAC9 跨站脚本漏洞

DELL Dell EMC iDRAC9 is a system management solution comprising hardware and software from Dell USA. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems. A cross-site scripting vulnerability exists in Dell EMC iDRAC9 in versions prior to...

DELL Dell EMC iDRAC9 跨站脚本漏洞

Dell EMC iDRAC9 is a hardware and software-based system management solution from Dell DELL. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems. cross-site scripting vulnerability exists in versions prior to Dell EMC iDRAC9 4.40.40.00. A...

CVE-2021-21577: Improper Neutralization of Input During Web Page Generation

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link...

PT-2021-14622

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.40.40.00 Description The issue is a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim's browser by...

PT-2021-14623

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.40.40.00 Description The issue is a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by...

CVE-2021-21563

Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an authenticated user with low-privileges to trigger a denial of service event...

CVE-2021-21563

Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x are affected by an Improper Check for Unusual or Exceptional Conditions in the auditing component. This can allow an authenticated user with low privileges to trigger a denial of service. Root cause is an inadequate validation of anomalous/atypical...

CVE-2021-21562

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE and ISIPRIVSYSUPGRADE or ISIPRIVAUDIT to provide an untrusted path which can lead to run resources that are not under the application’s direct...

CVE-2021-21562

Dell EMC PowerScale OneFS is affected by CVE-2021-21562, described as an untrusted search path vulnerability that could let a user with specific privileges cause execution of resources outside the application’s control. The vulnerability affects OneFS and is associated with local access, with par...

PT-2021-14611

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.1.2 through 9.1.0.x Description The issue is related to an Improper Check for Unusual or Exceptional Conditions in the auditing component of Dell EMC PowerScale OneFS. This can lead to an authenticated user...

CVE-2021-21563: Improper Check for Unusual or Exceptional Conditions

Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an authenticated user with low-privileges to trigger a denial of service event...

CVE-2021-21562: Untrusted Search Path

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE and ISIPRIVSYSUPGRADE or ISIPRIVAUDIT to provide an untrusted path which can lead to run resources that are not under the application’s direct...

PT-2021-14610

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS affected versions not specified Description The issue allows a user with specific privileges, including ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE and ISI PRIV SYS UPGRADE or ISI PRIV AUDIT, to provide an untrusted...

Vulnerability fixed in Dell Avamar Server

A vulnerability has been fixed in Dell EMC Avamar Server. The vulnerability allows a malicious party to use an Open Redirect attack to send the visitor with a custom link to a malicious website. Dell EMC has released updates to fix the vulnerability. For more information, see:...