Description
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users access the page through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Integrated Data Protection Appliance | prior to 2.3 | — |