CVE-2021-21542

Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generating a certificate. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.

• CWE-79
• CWE-79

• https://www.dell.com/support/kbdoc/000185293Vendor Advisory
• https://www.dell.com/support/kbdoc/000185293Vendor Advisory

Published

Apr 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21537Dell Hybrid Client versions prior to 1.5 contain an informat…5.5
• CVE-2021-21538Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to …10
• CVE-2021-21539Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-…7.1
• CVE-2021-2154Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2021-21540Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack…8.1
• CVE-2021-21541Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-b…6.1
• CVE-2021-21543Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multipl…4.8
• CVE-2021-21544Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an impr…2.7
• CVE-2021-21545Dell Peripheral Manager 1.3.1 or greater contains remediatio…7.8
• CVE-2021-21546Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and …5.5
• CVE-2021-21547Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0…6.7
• CVE-2021-21548 Dell EMC Unisphere for PowerMax versions before 9.1.0.27, D…7.4