Vulnerability Details CVE-2022-34451
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to hijack user sessions or trick a victim application user into unknowingly send arbitrary requests to the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.3%
CVSS Severity
CVSS v3 Score 4.8
References
Products affected by CVE-2022-34451
-
cpe:2.3:a:dell:powerpath_management_appliance:3.0
-
cpe:2.3:a:dell:powerpath_management_appliance:3.1
-
cpe:2.3:a:dell:powerpath_management_appliance:3.2
-
cpe:2.3:a:dell:powerpath_management_appliance:3.3