CVE-2019-18578

Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious HTML or JavaScript code in application fields. When victim users access the injected page through their browsers, the malicious code may be executed by the web browser in the context of the vulnerable web application.

• CWE-79
• CWE-79

• https://www.dell.com/support/security/en-us/details/539703/DSA-2019-172-Dell-EMC-XtremIO-Security-Update-for-Multiple-VulnerabilitiesVendor Advisory
• https://www.dell.com/support/security/en-us/details/539703/DSA-2019-172-Dell-EMC-XtremIO-Security-Update-for-Multiple-VulnerabilitiesVendor Advisory

Published

Mar 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18572The RSA Identity Governance and Lifecycle and RSA Via Lifecy…9.8
• CVE-2019-18573The RSA Identity Governance and Lifecycle and RSA Via Lifecy…8.8
• CVE-2019-18574RSA Authentication Manager software versions prior to 8.4 P8…4.8
• CVE-2019-18575Dell Command Configure versions prior to 4.2.1 contain an un…7.1
• CVE-2019-18576Dell EMC XtremIO XMS versions prior to 6.3.0 contain an info…6.7
• CVE-2019-18577Dell EMC XtremIO XMS versions prior to 6.3.0 contain an inco…6.7
• CVE-2019-18579Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions pri…6.8
• CVE-2019-1858A vulnerability in the Simple Network Management Protocol (S…8.6
• CVE-2019-18580Dell EMC Storage Monitoring and Reporting version 4.3.1 cont…10
• CVE-2019-18581Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.…7.2
• CVE-2019-18582Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.…7.2
• CVE-2019-18583Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…