CVE-2023-43071 (published 2023-10-05T17:43:29.648Z)

Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formula injection which might escalate to cross-site scripting attacks in HTML pages in the GUI. A remote authenticated attacker could potentially exploit these issues, leading to various injection type attacks.


Affected products: Vendor: Dell
Product: Dell SmartFabric Storage Software
Versions: v1.4.0 and prior