We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Reserved 2025-04-15 | Published 2025-08-04 | Updated 2025-08-04 | Assigner dellCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Dell would like to thank Sina Kheirkhah of watchTowr for reporting this issue.
www.dell.com/...security-update-for-multiple-vulnerabilities
Support options
