CVE-2019-18588
Medium
Description
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users' sessions.
SeverityMedium
CVSS5.4
Exploit probability—
ProductDell Emc Powermax
PublishedJan 10, 2020
First seenJan 10, 2020
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- dell emc_unisphere_for_powermax9.0.2.16, 9.1.0.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell emc_powermax | 5978.221.221, 5978.479.479 | — |
| dell emc_unisphere_for_powermax | v < 9.0.2.16, 9.1.0.0 ≤ v < 9.1.0.9 | 9.0.2.16, 9.1.0.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.