Known vulnerabilities in iDRAC9 - page 2

Vendor: Dell
Software: iDRAC9
Software CPE: cpe:2.3:a:dell:idrac9:*:*:*:*:*:*:*:*
Total vulnerabilities: 43
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iDRAC9 iDRAC9 is affected by 43 known vulnerabilities: 12 high, 19 medium, 12 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66218 - Improper Authentication
CVE-2021-21544
CWE-287 Low
No
No
4.40.00.00 09.08.2022 SB2021043026
SB2022102060
#VU66217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21543
CWE-79 Medium
No
No
4.40.00.00 09.08.2022 SB2021043026
SB2022102060
#VU66216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21542
CWE-79 Medium
No
No
4.40.10.00 09.08.2022 SB2021043025
SB2022102060
#VU66214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21541
CWE-79 Medium
No
No
4.40.40.00 09.08.2022 SB2021043024
SB2022102060
#VU66213 - Stack-based buffer overflow
CVE-2021-21540
CWE-121 Medium
No
No
4.40.40.00 09.08.2022 SB2021043024
SB2022102060
#VU66212 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21539
CWE-367 Low
No
No
4.40.40.00 09.08.2022 SB2021043024
SB2022102060
#VU66211 - Improper Authentication
CVE-2021-21538
CWE-287 High
No
No
4.40.10.00 09.08.2022 SB2021043025
#VU66210 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21581
CWE-79 Medium
No
No
5.00.00.00 09.08.2022 SB2021080333
SB2022111726
SB2023081529
#VU66209 - Improper input validation
CVE-2021-36300
CWE-20 High
No
No
5.00.00.00 09.08.2022 SB2021080333
SB2022111726
SB2023081529
#VU66207 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-36299
CWE-89 Medium
No
No
4.40.29.00, 5.00.00.00 09.08.2022 SB2021112338
SB2022111726
SB2023081529
#VU66180 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26198
CWE-79 Medium
No
No
4.32.10.00, 4.40.00.00 08.08.2022 SB2020121628
SB2022102059
#VU62645 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21580
CWE-74 Low
No
No
5.00.00.00 27.04.2022 SB2021080330
SB2022042707
SB2022111726
and 1 more
#VU62642 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21579
CWE-601 Medium
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU62639 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21578
CWE-601 Medium
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU62637 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21577
CWE-79 Low
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU62636 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21576
CWE-79 Low
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU45801 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5366
CWE-22 Low
No
No
4.20.20.20 20.08.2020 SB2020082009
SB2022080311
SB2020070954
and 3 more
#VU26517 - Stack-based buffer overflow
CVE-2020-5344
CWE-121 High
No
No
4.00.00.00 01.04.2020 SB2020040154
SB2022080311
SB2022102631
and 1 more
#VU22789 - Improper Authorization
CVE-2019-3764
CWE-285 Medium
No
No
3.36.36.36 15.11.2019 SB2019110725
SB2022102631
SB2022110116
and 3 more
#VU16672 - Permissions, Privileges, and Access Controls
CVE-2018-15774
CWE-264 Low
No
No
3.20.21.20, 3.21.24.22, 3.21.26.22, 3.23.23.23 24.12.2018 SB2018122404


Showing elements 21 - 40 out of 43