Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-44301 EUVD-2023-48657GHSA-4jpw-w2c8-hq6f

Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potenti…

Published Dec 4, 2023 · Updated Aug 2, 2024 · Assigned by dell

Description

Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.

Affected products

VendorProductAffectedFixed
Dell Dell PowerProtect Data Manager DM5500 Appliance DM5500 5.14 and below —

References