Vulnerabilities > CVE-2024-0169 - Unspecified vulnerability in Dell Unity Operating Environment

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

dell

NVD

Published: 2024-02-12

Updated: 2024-11-21

Summary

Dell Unity, version(s) 5.3 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Vulnerable Configurations

Part	Description	Count
Application	Dell Dell Unity Operating Environment - Dell Unity Operating Environment 5.0.7.0.5.008 Dell Unity Operating Environment 5.2.0.0.5.173 Dell Unity Operating Environment 5.3.0.0.5.120 Dell Unity Operating Environment 5.4.0.0	5

References

https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities