Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

16 records in Cloudlink · all components

TI-2022-15278 CVE-2022-34379 · GHSA-9c97-cr35-rhc3

Improper authentication in Dell CloudLink

Priority MEDIUM 44

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2022-09-01 Fixed in 7.1.3 CWE-287
TI-2021-14677 CVE-2021-36313 · GHSA-wm6p-qp26-2h9v

Injection in Dell CloudLink

Priority MEDIUM 43

Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02076 Published 2021-11-23 Fixed in 7.1.1 CWE-74
TI-2025-29099 CVE-2025-46364 · GHSA-cgv7-rqxr-q664

Improper privilege management in Dell CloudLin

Priority MEDIUM 41

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00327 Published 2025-11-05 Fixed in 8.1.1 CWE-269
TI-2025-28768 CVE-2025-45378 · GHSA-79m5-m533-xq7v

OS command injection in Dell CloudLink

Priority MEDIUM 41

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00382 Published 2025-11-05 Fixed in 8.2 CWE-78
TI-2025-21778 CVE-2025-30479 · GHSA-v789-p96v-5f4v

OS command injection in Dell CloudLink

Priority MEDIUM 40

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01018 Published 2025-11-05 Fixed in 8.2 CWE-78
TI-2025-28769 CVE-2025-45379 · GHSA-j6fc-gfmx-7g9v

OS command injection in Dell CloudLink

Priority LOW 39

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00654 Published 2025-11-05 Fixed in 8.2 CWE-78
TI-2022-15279 CVE-2022-34380 · GHSA-pv49-7hj2-g6cv

Improper authentication in Dell CloudLink

Priority LOW 39

Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00201 Published 2022-09-01 Fixed in 7.1.4 CWE-287
TI-2022-08290 CVE-2022-24414 · GHSA-cvg9-qpjf-fv53

Information disclosure in Dell CloudLink

Priority LOW 34

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00647 Published 2022-05-26 Fixed in 7.1.3 CWE-598
TI-2025-29100 CVE-2025-46365 · GHSA-vhqc-4wgw-frfj

Command injection in Dell CloudLink

Priority LOW 32

Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0037 Published 2025-11-05 Fixed in 8.1.1 CWE-77
TI-2025-19431 CVE-2025-26484 · GHSA-cp3q-pqc2-9f4g

XML external entity injection in Dell CloudLink

Priority LOW 25

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00322 Published 2025-08-14 No fix listed CWE-611
TI-2024-24664 CVE-2024-37137 · GHSA-8457-mxpv-x45g

Broken or risky cryptographic algorithm in Dell CloudLink

Priority LOW 24

Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00117 Published 2024-06-28 Fixed in 7.1.9 CWE-1240
Open these records in search →