Skip to content
OpenAdvisories
Critical · 9.0 CVE-2019-18588 EUVD-2019-8334GHSA-5qmp-8h68-wq8j

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMa…

Published Jan 10, 2020 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users' sessions.

Affected products

VendorProductAffectedFixed
Dell Unisphere for PowerMax unspecified – < 9.1.0.9 and 9.0.2.16 9.1.0.9 and 9.0.2.16

References