CVE-2017-14383: XSS
In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary HTML code in the user's browser session in the context of the affected web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14383?
CVE-2017-14383 is classified as a medium-severity vulnerability due to its potential exploitation through reflected cross-site scripting.
How do I fix CVE-2017-14383?
To fix CVE-2017-14383, upgrade the Dell EMC VNX2 firmware to version 8.1.9.217 or the VNX1 firmware to version 7.1.80.8 or higher.
What types of attacks can CVE-2017-14383 lead to?
CVE-2017-14383 can allow remote unauthenticated attackers to perform reflected cross-site scripting attacks on vulnerable systems.
Which versions of Dell EMC products are affected by CVE-2017-14383?
CVE-2017-14383 affects Dell EMC VNX2 versions prior to 8.1.9.217 and VNX1 versions prior to 7.1.80.8.
Can an authenticated user exploit CVE-2017-14383?
No, CVE-2017-14383 can be exploited by a remote unauthenticated attacker.