Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Filtered by product Idrac9
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-26198 1 Dell 2 Idrac9, Idrac9 Firmware 2020-12-22 4.3 MEDIUM 6.1 MEDIUM
Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.
CVE-2020-5366 1 Dell 2 Idrac9, Idrac9 Firmware 2020-07-15 4.0 MEDIUM 6.5 MEDIUM
Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files.