CVE-2021-21515

Sep 3, 2024

Published Date: 2021-03-01T21:15Z

Last Modified: 2021-03-08T19:41Z

CVSS Score: 5.4 (MEDIUM)

EPSS Score: 0.07%

Risk Score: 3.78 (MEDIUM)

Risk Score based on CVSS score and EPSS. This score is for reference purposes and is not internationally recognized.

CVSS: 5.4 | EPSS: 0.07%

NVD Links:

https://nvd.nist.gov/vuln/detail/CVE-2021-21515

Description: Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.

Mitre ATT&CK Technical v15.1

T1153 – Source
T1583.004 – Server
T1064 – Scripting
T1584.004 – Server
T1053.002 – At

Technical Analysis & Mitigation Measures

Reference Links

https://www.dell.com/support/kbdoc/en-us/000183430/dsa-2021-043-dell-emc-sourceone-java-script-xss-stored-vulnerability

Vendor - Produce - Version

emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell, emc_sourceone - dell

Disclaimer

The content on this website is automatically sourced from external websites such as the National Vulnerability Database (NVD), GitHub, and other security-related sources. This content is for reference purposes only, and we are not responsible for the accuracy or integrity of the information linked or displayed from these sources.