Dell EMC iDRAC9 Cross-Site Scripting Vulnerability (CNVD-2021-94895)

Dell EMC iDRAC9 is a hardware and software-based system management solution from Dell (DELL). The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems. cross-site scripting vulnerability exists in versions prior to Dell EMC iDRAC9 4.40.40.00. A remote attacker could exploit this vulnerability to run malicious HTML or JavaScript in the victim user’s browser.