CVE-2024-22230

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
5.4MEDIUM
EPSS
0.4%
top 36.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell UnityDell Unity Operating Environment
Timeline
PublishedFeb 12

Description

Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability. An authenticated attacker could potentially exploit this vulnerability, stealing session information, masquerading as the affected user or carry out any actions that this user could perform, or to generally control the victim's browser.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:NExploitability: 3.1 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5dell/unity< 5.4

🔴Vulnerability Details

2
GHSA
GHSA-6jw2-qq9j-97fv: Dell Unity, versions prior to 5↗2024-02-12
▶
CVEList
CVE-2024-22230: Dell Unity, versions prior to 5↗2024-02-12
▶