CVE-2021-21543

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected parameters. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.

• CWE-79
• CWE-79

• https://www.dell.com/support/kbdoc/000185293Vendor Advisory
• https://www.dell.com/support/kbdoc/000185293Vendor Advisory

Published

Apr 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21538Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to …10
• CVE-2021-21539Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-…7.1
• CVE-2021-2154Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2021-21540Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack…8.1
• CVE-2021-21541Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-b…6.1
• CVE-2021-21542Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multipl…4.8
• CVE-2021-21544Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an impr…2.7
• CVE-2021-21545Dell Peripheral Manager 1.3.1 or greater contains remediatio…7.8
• CVE-2021-21546Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and …5.5
• CVE-2021-21547Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0…6.7
• CVE-2021-21548 Dell EMC Unisphere for PowerMax versions before 9.1.0.27, D…7.4
• CVE-2021-21549Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-…8.8