High · 8.3 CVE-2019-3709 EUVD-2019-13344GHSA-mfwq-4543-q2q6

Cross-Site Scripting Vulnerability while registering vCenter servers

Published Apr 17, 2019 · Updated Sep 16, 2024 · Assigned by dell

Vendor: DELL EMC Product: Dell EMC IsilonSD Management Server

Description

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while registering vCenter servers. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

Affected products

Vendor	Product	Affected	Fixed
Dell EMC	Dell EMC IsilonSD Management Server	1.1.0	—

References

https://seclists.org/fulldisclosure/2019/Apr/16