Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

2082 records

Priority CRITICAL 100KEV

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.13525 Published 2026-02-17 Fixed in 6.0.3.1 HF1 CWE-798
TI-2025-24909 CVE-2025-36604 · GHSA-g5wq-c47p-2h9f

OS command injection in Dell Unity

Priority CRITICAL 86

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.69197 Published 2025-08-04 Fixed in 5.5.1 CWE-78
Priority HIGH 73

Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potent…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.50874 Published 2018-04-09 No fix listed CWE-862
Priority HIGH 70

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.48613 Published 2020-07-28 Fixed in 9.5 CWE-22
Priority HIGH 70

hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a po…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.68588 Published 2012-06-19 No fix listed CWE-287
Priority MEDIUM 61

A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management (eM…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.21313 Published 2018-03-08 No fix listed CWE-798
Priority MEDIUM 59

Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.29633 Published 2021-11-23 Fixed in 5.00.00.00 CWE-89
Priority MEDIUM 58

Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2024-04-24 No fix listed CWE-20
Priority MEDIUM 57

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.20286 Published 2024-08-19 No fix listed CWE-77
Priority MEDIUM 57

EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) cont…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14024 Published 2017-07-17 No fix listed CWE-798
Priority MEDIUM 56

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04725 Published 2026-09-09 Fixed in 5.36.00.00 or later, 5.36.00.16 or later CWE-77
Priority MEDIUM 56

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04725 Published 2026-09-09 Fixed in 5.36.00.00 or later, 5.36.00.16 or later CWE-78
TI-2026-56219 CVE-2026-81467 · GHSA-6mp7-g3jw-642m

OS command injection in Dell ThinOS 10

Priority MEDIUM 54

Dell ThinOS 10, versions prior to 2605_10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02987 Published 2026-09-10 Fixed in 2605_10.2616 CWE-78
TI-2025-16296 CVE-2025-22398 · GHSA-jfxx-2225-hwx8

OS command injection in Dell Unity

Priority MEDIUM 53

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02022 Published 2025-03-28 Fixed in 5.5.0.0.5.259 CWE-78
Load more
Open these records in search →