VULNERABILITY INTELLIGENCE

CVE-2024-22230

CVSS score6.4 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2024-02-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Description

Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability. An authenticated attacker could potentially exploit this vulnerability, stealing session information, masquerading as the affected user or carry out any actions that this user could perform, or to generally control the victim's browser.

Weakness classification

  • security_alert@emc.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references