# Integrated Dell Remote Access Controller (iDRAC).

Every CVE that names Integrated Dell Remote Access Controller (iDRAC) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [SQL injection in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-36348.md)
  `CVE-2021-36348` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.9 Medium · Not analysed yet · Published 25 Jan 2022 · Tags: SQL injection
- [Stack-based buffer overflow in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-36347.md)
  `CVE-2021-36347` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.2 Medium · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [Improper authentication in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-36346.md)
  `CVE-2021-36346` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.3 Medium · Not analysed yet · Published 25 Jan 2022 · Tags: Authentication bypass
- [Stack-based buffer overflow in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-36301.md)
  `CVE-2021-36301` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.9 Medium · EPSS 0.28 · Not analysed yet · Published 23 Nov 2021 · Tags: Memory corruption
- [SQL injection in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-36300.md)
  `CVE-2021-36300` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.5 Medium · EPSS 0.33 · Not analysed yet · Published 23 Nov 2021 · Tags: SQL injection
- [SQL injection in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-36299.md)
  `CVE-2021-36299` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 7.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 23 Nov 2021 · Tags: SQL injection
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21581.md)
  `CVE-2021-21581` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2021 · Tags: Cross-site scripting (XSS)
- [Injection in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21580.md)
  `CVE-2021-21580` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 4.3 Medium · Not analysed yet · Published 3 Aug 2021 · Tags: Other injection
- [Open redirect in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21579.md)
  `CVE-2021-21579` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 3 Aug 2021 · Tags: Open redirect
- [Open redirect in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21578.md)
  `CVE-2021-21578` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 3 Aug 2021 · Tags: Open redirect
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21577.md)
  `CVE-2021-21577` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 3 Aug 2021 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21576.md)
  `CVE-2021-21576` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 3 Aug 2021 · Tags: Cross-site scripting (XSS)
- [Improper authentication in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21538.md)
  `CVE-2021-21538` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2021 · Tags: Authentication bypass
- [Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability.](https://agentprime.io/advisories/CVE-2021-21544.md)
  `CVE-2021-21544` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 2.7 Low · Not analysed yet · Published 30 Apr 2021 · Tags: CWE-602
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21543.md)
  `CVE-2021-21543` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 4.8 Medium · Not analysed yet · Published 30 Apr 2021 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21542.md)
  `CVE-2021-21542` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 4.8 Medium · Not analysed yet · Published 30 Apr 2021 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21541.md)
  `CVE-2021-21541` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 30 Apr 2021 · Tags: Cross-site scripting (XSS)
- [Stack-based buffer overflow in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21540.md)
  `CVE-2021-21540` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.9 Medium · Not analysed yet · Published 30 Apr 2021 · Tags: Memory corruption
- [Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability.](https://agentprime.io/advisories/CVE-2021-21539.md)
  `CVE-2021-21539` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.9 Medium · Not analysed yet · Published 30 Apr 2021
- [Improper input validation in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2021-21510.md)
  `CVE-2021-21510` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 8 Mar 2021 · Tags: CWE-20
- [Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2020-26198.md)
  `CVE-2020-26198` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 6.1 Medium · Not analysed yet · Published 16 Dec 2020 · Tags: Cross-site scripting (XSS)
- [Path traversal in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2020-5366.md)
  `CVE-2020-5366` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2020 · Tags: Path traversal
- [Stack-based buffer overflow in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2020-5344.md)
  `CVE-2020-5344` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 7.0 High · Not analysed yet · Published 31 Mar 2020 · Tags: Memory corruption
- [Improper authorization in Integrated Dell Remote Access Controller (iDRAC)](https://agentprime.io/advisories/CVE-2019-3764.md)
  `CVE-2019-3764` · CVE record: Dell Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.0 Medium · Not analysed yet · Published 7 Nov 2019 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=integrated-dell-remote-access-controller-idrac>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/integrated-dell-remote-access-controller-idrac/>. Everything for agents: <https://agentprime.io/llms.txt>.