Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

84 records in Emc Powerscale Onefs · all components

Priority MEDIUM 50

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2023-02-01 No fix listed CWE-274
Priority MEDIUM 45

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0141 Published 2022-04-12 No fix listed CWE-307
Priority MEDIUM 45

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01429 Published 2021-02-09 Fixed in 8.1.2 / 8.2.2 / 9.1.0.x / Empire / Main CWE-287
Priority MEDIUM 43

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00505 Published 2023-02-01 No fix listed CWE-295
Priority MEDIUM 43

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0067 Published 2022-09-02 Fixed in 8.2.x, 9.0.0.x +5 CWE-522
Priority MEDIUM 41

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00626 Published 2023-02-01 No fix listed CWE-532
Priority MEDIUM 41

Dell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or Throttling vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0103 Published 2022-10-21 Fixed in 9.4.0.x CWE-770
Priority MEDIUM 40

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01076 Published 2021-03-08 Fixed in 8.1.2, 8.2.2,9.1.0.x,EMPIRE (9.2.0) +1 CWE-20
Priority MEDIUM 40

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01152 Published 2020-07-06 No fix listed CWE-732
Priority MEDIUM 40

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01214 Published 2020-09-02 Fixed in 8.1.2, 8.2.2 +1 CWE-732
Priority MEDIUM 40

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00991 Published 2021-07-29 Fixed in All supported CWE-276
Priority LOW 39

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00687 Published 2021-08-16 No fix listed CWE-732
Priority LOW 39

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00593 Published 2021-07-28 Fixed in OneFS 8.1.2, 8.2.2 +1 CWE-276
Priority LOW 38

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0066 Published 2023-02-01 No fix listed CWE-532
Priority LOW 36

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00668 Published 2022-09-02 Fixed in 9.0.0.x, 9.1.0.x +5 CWE-532
Priority LOW 36

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities.

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00393 Published 2023-02-10 No fix listed CWE-79
Load more
Open these records in search →