Vulnerability Description
Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious HTML or JavaScript code in application fields. When victim users access the injected page through their browsers, the malicious code may be executed by the web browser in the context of the vulnerable web application.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Xtremio Management Server | < 6.3.0 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/security/en-us/details/539703/DSA-2019-172-Dell-EMCVendor Advisory
- https://www.dell.com/support/security/en-us/details/539703/DSA-2019-172-Dell-EMCVendor Advisory
FAQ
What is CVE-2019-18578?
CVE-2019-18578 is a vulnerability with a CVSS score of 9.0 (CRITICAL). Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious HT...
How severe is CVE-2019-18578?
CVE-2019-18578 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-18578?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Xtremio Management Server.