CVE-2020-35170

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users’ sessions.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-351739.8The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.CVE-2020-351755.3Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.CVE-2020-351765.3In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was inten CVE-2020-351775.3HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.CVE-2020-35185.4A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, rem CVE-2020-351849.8The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deploy CVE-2020-351859.8The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost doc CVE-2020-351869.8The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container CVE-2020-351879.8The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegra CVE-2020-351899.8The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker CVE-2020-35198.1A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote atta CVE-2020-351909.8The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using th