CVE-2022-34451 - PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability · CoreCVE

Back Back to CVE browser

MEDIUM

PowerPath Management Appliance with versions 3.3 & 3.2, 3.1 & 3.0 contains a Stored Cross-site Scripting Vulnerability

Published Feb 10, 2023

4.8

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to hijack user sessions or trick a victim application user into unknowingly send arbitrary requests to the server.

Affected products

Vendor Dell Product PowerPath Management Appliance Default
unaffected
- Version
  3.3, 3.2*, 3.1, 3.0*
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PowerPath Management Appliance

unaffected

Version	Status	Constraints
3.3, 3.2, 3.1, 3.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://www.dell.com/support/kbdoc/000205404
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://www.dell.com/support/kbdoc/000205404		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Feb 10, 2023

Updated Mar 24, 2025

Reserved Jun 23, 2022

Link CVE-2022-34451

CISA Vulnrichment

Updated Mar 24, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-34451

Severity n/a

Public date n/a

Links CVE-2022-34451