Vulnerability Description
Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability. An authenticated attacker could potentially exploit this vulnerability, stealing session information, masquerading as the affected user or carry out any actions that this user could perform, or to generally control the victim's browser.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Unity Operating Environment | < 5.4.0.0.5.094 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-Vendor Advisory
FAQ
What is CVE-2024-22230?
CVE-2024-22230 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability. An authenticated attacker could potentially exploit this vulnerability, stealing session information, masquerading as...
How severe is CVE-2024-22230?
CVE-2024-22230 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-22230?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Unity Operating Environment.