CVE-2020-35170

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-05 · updated 2026-06-17
Weakness: CWE-79

Description

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users’ sessions.

Affected products

Dell Powermax Os: 5978.221.221, 5978.479.479
Dell Unisphere: before 9.1.0.24; from 9.2 before 9.2.0.6 — fixed in 9.1.0.24, 9.2.0.6

How to fix

Upgrade to a fixed version: Dell Unisphere 9.1.0.24, 9.2.0.6. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-35170 or the next vulnerability affects your stack