Dell iDRAC9 Cross-site Scripting (CVE-2020-26198)

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim's browser by tricking a victim in to...

CVE-2020-26198

creationtimestamp| type| source ---|---|--- 2020-12-16 18:41:50+00:00| seen| https://t.me/cibsecurity/20934...

CVE-2020-26198

Dell EMC iDRAC9 is affected by a reflected cross-site scripting (XSS) vulnerability in the web UI for versions prior to 4.32.10.00 and 4.40.00.00. A remote attacker could lure a victim to a crafted link to execute malicious HTML/JavaScript in the browser. Public references indicate the vulnerabil...