Stored Cross-Site Scripting Vulnerability in Dell PowerStore

CVE-2022-26866

What is CVE-2022-26866?

Dell PowerStore prior to version 2.1.1.0 is susceptible to a Stored Cross-Site Scripting vulnerability. This allows a network attacker with high privileges to inject malicious HTML or JavaScript code into a trusted application data store. When users access this compromised data, the scripts execute within their web browsers, potentially leading to serious consequences such as information disclosure, session theft, or client-side request forgery. It is crucial for users to apply the latest updates to mitigate exploitation risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References