CVE-2019-3747

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users access the page through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

• CWE-79
• CWE-79

• https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-VulnerabilitiesVendor Advisory
• https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-VulnerabilitiesVendor Advisory

Published

Sep 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3740RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to…6.5
• CVE-2019-3741Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 …7.8
• CVE-2019-3742Dell/Alienware Digital Delivery versions prior to 3.5.2013 c…7.8
• CVE-2019-3744Dell/Alienware Digital Delivery versions prior to 4.0.41 con…7.8
• CVE-2019-3745The vulnerability is limited to the installers of Dell Encry…7.3
• CVE-2019-3746Dell EMC Integrated Data Protection Appliance versions prior…8.8
• CVE-2019-3749Dell Command Update versions prior to 3.1 contain an Arbitra…5.5
• CVE-2019-3750Dell Command Update versions prior to 3.1 contain an Arbitra…5.5
• CVE-2019-3751Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0…6.4
• CVE-2019-3752Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 an…8.2
• CVE-2019-3753Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8…6.5
• CVE-2019-3754Dell EMC Unity Operating Environment versions prior to 5.0.0…4.7