Dell Integrated Remote Access Controller (iDRAC) 6 before 2.85 and 7/8 before 2.30.30.30 has XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://en.community.dell.com/techcenter/extras/m/white_papers/20441859 | vendor advisory |
http://www.securityfocus.com/bid/97520 | vdb entry third party advisory |