VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jan 5, 2021· Updated Jun 17, 2026

CVE-2020-35170

CVE-2020-35170

Description

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users’ sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Dell/Unisphere For Powermaxllm-fuzzy2 versions
    <9.1.0.9, <9.0.2.16+ 1 more
    • (no CPE)range: <9.1.0.9, <9.0.2.16
    • (no CPE)range: unspecified
  • Dell/PowerMaxllm-fuzzy
    Range: 5978.221.221, 5978.479.479
  • Dell/Unisphere
    cpe:2.3:a:dell:unisphere:*:*:*:*:*:*:powermax:*
    Range: <9.1.0.24
  • Dell/Powermax OS2 versions
    cpe:2.3:o:dell:powermax_os:5978.221.221:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dell:powermax_os:5978.221.221:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:powermax_os:5978.479.479:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.