CVE-2022-33935: XSS
Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-33935?
The severity of CVE-2022-33935 is medium with a CVSS score of 5.4.
How does CVE-2022-33935 affect Dell EMC Data Protection Advisor?
CVE-2022-33935 affects Dell EMC Data Protection Advisor versions 19.6 and earlier.
What is the vulnerability type of CVE-2022-33935?
CVE-2022-33935 is a Stored Cross Site Scripting (XSS) vulnerability.
How can an attacker exploit CVE-2022-33935?
An attacker can exploit CVE-2022-33935 by storing malicious HTML or JavaScript codes in a trusted application data store and tricking a victim user into accessing it.
Is there a security update available for CVE-2022-33935?
Yes, Dell EMC has released a security update to address the Stored Cross Site Scripting vulnerability in Data Protection Advisor. Please refer to Dell's support website for more information.