by Kastro
Paper/Archive/CVE-2021-21515

CVE-2021-21515

Dell SourceOne — Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability.

EPSS 0.8%CVSS 9.0
critical.is priorityof 100
39
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 58.1.581 × 2011.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.

Affected

ProductAffectedFixed inSource
SourceOneunspecified – < 7.2SP10-HF27.2SP10-HF2CNA

Scores by source

dell (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

refdell.com/support/kbdoc/en-us/000183430/dsa-2021-043-dell-emc-sourceone-java-script-xss-stored-vulnerability