CVE-2021-21577: Dell Emc IDRAC9 Firmware

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.

Affected products

• Dell Emc IDRAC9 Firmware: before 4.40.40.00 (fixed in 4.40.40.00)

Published 2021-08-03. Last modified 2026-06-17.