CVE-2021-21541

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser...

CVE-2021-21541

Dell iDRAC9 (Dell EMC) is affected by CVE-2021-21541: a DOM-based cross-site scripting flaw in versions before 4.40.00.00. An unauthenticated remote attacker could entice a user to supply malicious HTML/JavaScript within the vulnerable web interface, causing the browser to execute the code in the...

Dell iDRAC Multiple Vulnerabilities (DSA-2021-073)

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple vulnerabilities: - A Time-of-check Time-of-use TOCTOU race condition vulnerability. A remote authenticated attacker may potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is...