CVE:CVE-2022-29091
CNNVD:CNNVD-202205-4200
DELL UnityVSA和DELL Unity都是美国戴尔（DELL）公司的产品。UnityVSA是一套虚拟Unity存储环境。DELL Unity是一套虚拟Unity存储环境。
Dell Unity、Dell UnityVSA、Dell UnityXT 5.2.0.0.5.173之前版本存在安全漏洞，该漏洞源于存在反射型跨站点脚本漏洞。远程攻击者利用该漏洞执行恶意 HTML 或 JavaScript 代码，从而导致信息泄露、会话盗窃或客户端请求伪造。
solution:Upgrade dell unity_operating_environment to a higher version than 5.2.0.0.5.173,and avoid the version (,5.2.0.0.5.173); Upgrade dell unity_xt_operating_environment to a higher version than 5.2.0.0.5.173,and avoid the version (,5.2.0.0.5.173); Upgrade dell unityvsa_operating_environment to a higher version than 5.2.0.0.5.173,and avoid the version (,5.2.0.0.5.173)