CVE-2021-36299
- EPSS 1.92%
- Published 23.11.2021 20:15:10
- Last modified 21.11.2024 06:13:27
Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclo...
CVE-2021-36300
- EPSS 5.94%
- Published 23.11.2021 20:15:10
- Last modified 21.11.2024 06:13:27
iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause inf...
CVE-2021-36301
- EPSS 13.33%
- Published 23.11.2021 20:15:10
- Last modified 21.11.2024 06:13:27
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to th...
CVE-2021-21579
- EPSS 0.53%
- Published 03.08.2021 16:15:08
- Last modified 21.11.2024 05:48:38
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted...
CVE-2021-21580
- EPSS 0.48%
- Published 03.08.2021 16:15:08
- Last modified 21.11.2024 05:48:38
Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users int...
CVE-2021-21581
- EPSS 0.25%
- Published 03.08.2021 16:15:08
- Last modified 21.11.2024 05:48:38
Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a...
CVE-2021-21576
- EPSS 0.27%
- Published 03.08.2021 16:15:07
- Last modified 21.11.2024 05:48:38
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to f...
CVE-2021-21577
- EPSS 0.27%
- Published 03.08.2021 16:15:07
- Last modified 21.11.2024 05:48:38
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to f...
CVE-2021-21578
- EPSS 0.52%
- Published 03.08.2021 16:15:07
- Last modified 21.11.2024 05:48:38
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted...