NetSight
IP …
high8.8

CVE-2023-44286

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability.

Impact

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the injection of malicious HTML or JavaScript code to a victim user's DOM environment in the browser. . Exploitation may lead to information disclosure, session theft, or client-side request forgery.

Affected products

VendorProductAffected versions
DellPowerprotect Data Protection
before 2.7.6
DellApex Protection Storage
before 6.2.1.110
from 7.0 before 7.10.1.15
DellPowerprotect Data Domain
before 6.2.1.110
from 7.0 before 7.12.0.0
DellPowerprotect Data Domain Management Center
before 6.2.1.110
from 7.0 before 7.13.0.10
from 7.7 before 7.7.5.25
from 7.10 before 7.10.1.15
DellEmc Data Domain Os
before 6.2.1.110
from 7.0 before 7.12.0.0
from 7.7 before 7.7.5.25
from 7.10 before 7.10.1.15

Weakness classification

CWE-79

References