CVE-2019-3747: Dell Emc Integrated Data Protection Appliance Firmware

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users access the page through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

Affected products

• Dell Emc Integrated Data Protection Appliance Firmware: version 2.0 only; version 2.1 only; version 2.2 only

Published 2019-09-27. Last modified 2026-06-17.