Medium severity6.1NVD Advisory· Published Dec 16, 2020· Updated Jun 17, 2026

CVE-2020-26198

Description

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Idrac9 Firmware2 versions
cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*range: <=4.32.10.00
- cpe:2.3:o:dell:idrac9_firmware:4.40.00.00:*:*:*:*:*:*:*
Dell/iDRAC9llm-fuzzy
Range: <4.32.10.00, <4.40.00.00
Dell/Integrated Remote Access Controller Firmwarecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000181088/dsa-2020-268-dell-emc-idrac9-reflected-xss-vulnerabilitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000