CVE-2020-26198

MEDIUM

Dell EMC iDRAC9 < 4.32.10.00 and 4.40.00.00 - Reflected Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.

References (1)

Core 1

Scores

CVSS v3 6.1
EPSS 0.0030
EPSS Percentile 53.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (2)
dell/idrac9_firmware 4.40.00.00
dell/idrac9_firmware < 4.32.10.00
Published Dec 16, 2020
Tracked Since Feb 18, 2026