Skip to content
OpenAdvisories
Critical · 9.0 CVE-2021-21515 EUVD-2021-8787GHSA-756r-754x-rvfh

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may p…

Published Mar 1, 2021 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.

Affected products

VendorProductAffectedFixed
Dell SourceOne unspecified – < 7.2SP10-HF2 7.2SP10-HF2

References