Known vulnerabilities in iDRAC9 - page 3

Vendor: Dell
Software: iDRAC9
Software CPE: cpe:2.3:a:dell:idrac9:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iDRAC9 iDRAC9 is affected by 53 known vulnerabilities: 13 high, 27 medium, 13 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66212 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21539
CWE-367 Low
No
No
4.40.40.00 09.08.2022 SB2021043024
SB2022102060
#VU66180 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26198
CWE-79 Medium
No
No
4.32.10.00, 4.40.00.00 08.08.2022 SB2020121628
SB2022102059
#VU62642 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21579
CWE-601 Medium
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU62639 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21578
CWE-601 Medium
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU62637 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21577
CWE-79 Low
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU62636 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21576
CWE-79 Low
No
No
4.40.40.00 27.04.2022 SB2021080331
SB2022042707
SB2021043024
and 2 more
#VU45801 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5366
CWE-22 Low
No
No
4.20.20.20 20.08.2020 SB2020082009
SB2022080311
SB2020070954
and 3 more
#VU26517 - Stack-based buffer overflow
CVE-2020-5344
CWE-121 High
No
No
4.00.00.00 01.04.2020 SB2020040154
SB2022080311
SB2022102631
and 1 more
#VU22789 - Improper Authorization
CVE-2019-3764
CWE-285 Medium
No
No
3.36.36.36 15.11.2019 SB2019110725
SB2022102631
SB2022110116
and 3 more
#VU17809 - Command injection
CVE-2018-1243
CWE-77 Low
No
No
3.21.21.21 21.02.2019 SB2018070210
#VU17808 - Command injection
CVE-2018-1244
CWE-77 Low
No
No
3.21.21.21 21.02.2019 SB2018070210
#VU16672 - Permissions, Privileges, and Access Controls
CVE-2018-15774
CWE-264 Low
No
No
3.20.21.20, 3.21.24.22, 3.21.26.22, 3.23.23.23 24.12.2018 SB2018122404
#VU11081 - Improper Handling of Values
CVE-2018-1000116
CWE-229 High
No
No
3.21.21.21 14.03.2018 SB2018010928
SB2018032814
SB2018042416
and 4 more


Showing elements 41 - 60 out of 53