Dell Unity Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Dell Unity versions through 5.5. An unauthenticated attacker with remote access could exploit this issue, allowing the execution of malicious HTML or JavaScript in the context of the affected web application. This exploitation could result in information disclosure, session theft, or client-side request forgery.

Impact

Exploitation of this vulnerability could lead to the execution of malicious scripts in the context of the victim's browser, potentially allowing for information theft, session hijacking, or unauthorized actions on behalf of the user.

Remediation

Users can upgrade to Dell Unity version 5.5.1 or later. Instructions for downloading the update are available on the Dell Unity All Flash Family Drivers page.