Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-29091 EUVD-2022-33502GHSA-h5xq-v95p-wq6m

Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisp…

Published May 26, 2022 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI. An Unauthenticated Remote Attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.

Affected products

VendorProductAffectedFixed
Dell Unity unspecified – < 5.2.0.0.5.173 5.2.0.0.5.173

References