Back to Database
Status published
Medium
CVE-2013-3589
Cross-site scripting (XSS) vulnerability in the login page in the...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-3589
Credits & Attribution
No credits recorded in the NVD database.
More from dell
View All →CVE-2019-19620
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local...
Low
3.3
CVE-2018-1207
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection...
Critical
9.8
CVE-2018-15769
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in...
High
7.5
CVE-2018-15748
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine...
High
8.8
CVE-2017-2802
An exploitable dll hijacking vulnerability exists in the poaService.exe service...
High
7.8
Affected Vendor
dell
View all reports →Affected Software
idrac6 firmware, idrac6 monolithic, idrac7 firmware, idrac7
Vulnerable Versions:
0, 1.0, 1.1, 1.2, 1.3, 1.5, 1.6, 1.8, 1.00.00, 1.06.06, 1.10.10, 1.20.20, 1.23.23, 1.37.35
Timeline
Official Publish:
September 24th, 2013
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.