Dell EMC iDRAC9 Cross-Site Scripting Vulnerability (CNVD-2021-94891)

DELL Dell EMC iDRAC9 is a hardware and software-based system management solution from Dell (DELL). The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems. Dell EMC iDRAC9 in versions prior to 4.40.40.00 contains a cross-site scripting vulnerability, which stems from the product’s failure to filter input data for special characters, which could lead to client-side code execution through the vulnerability.