Dell

Records2082All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical222CVSS 9.0–10.0

CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability CRITICAL 100KEV 2026-02-18 TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability CRITICAL 97KEV 2022-03-31 TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records

Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

48 records in Policy Manager For Secure Connect Gateway · all components

TI-2022-15338 CVE-2022-34441 · GHSA-xjj6-f689-gwr9

Hard-coded credentials in Dell Secure Connect Gateway Policy Manager

MEDIUM 49

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2023-01-11 Fixed in 5.14 CWE-321

TI-2022-15337 CVE-2022-34440 · GHSA-xcff-26c4-66wg

Hard-coded credentials in Dell Secure Connect Gateway Policy Manager

MEDIUM 49

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2023-01-11 Fixed in 5.14 CWE-321

TI-2024-24658 CVE-2024-37131 · GHSA-c8f3-gj35-46cf

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource…

MEDIUM 43

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00489 Published 2024-06-13 No fix listed CWE-942

TI-2026-69891 CVE-2026-76779 · GHSA-2fw7-4gg3-crqx

Dell Secure Connect Gateway Policy Manager lacks login attempt limits

MEDIUM 42

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00269 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-307

TI-2026-51679 CVE-2026-73595 · GHSA-q95v-h5rw-jhg8

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions…

MEDIUM 42

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00112 Published 2026-09-29 Fixed in 5.36.00.16 or later CWE-494

TI-2022-15339 CVE-2022-34442 · GHSA-xwch-5xjc-3j47

Hard-coded credentials in Dell EMC Secure Connect Gateway Policy Manager

MEDIUM 42

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0043 Published 2023-01-18 Fixed in 5.12 CWE-321

TI-2026-69897 CVE-2026-78019 · GHSA-phc8-5h83-mfgj

Untrusted functionality in Dell Secure Connect Gateway Policy Manager

MEDIUM 40

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00347 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-829

TI-2026-51681 CVE-2026-73597 · GHSA-57q3-hg4w-7ccc

Cross-site request forgery in Dell Secure Connect Gateway Policy Manager

MEDIUM 40

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00103 Published 2026-09-29 Fixed in 5.36.00.16 or later CWE-352

TI-2026-69908 CVE-2026-78026 · GHSA-7fh8-5hpp-3hhj

Authorization bypass in Dell Secure Connect Gateway Policy Manager

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-639

TI-2026-69907 CVE-2026-78025 · GHSA-mwx9-pj39-v89h

Missing authentication in Dell Secure Connect Gateway Policy Manager

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00299 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-306

TI-2026-69906 CVE-2026-78024 · GHSA-mrv9-v83f-53hc

Server-side request forgery in Dell SCG Policy Manager

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00195 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-918

TI-2026-69905 CVE-2026-78023 · GHSA-fc4g-crw4-hc7m

Authorization bypass in Dell Secure Connect Gateway Policy Manager

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00186 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-639

TI-2026-69898 CVE-2026-78020 · GHSA-4wmw-p7m3-h442

Improper certificate validation in Dell SCG Policy Manager

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0018 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-295

TI-2026-69890 CVE-2026-76769 · GHSA-pg8v-vmm2-97mx

Missing authorization in Dell SCG Policy Manager allows escalation

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00189 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-862

TI-2026-51678 CVE-2026-73594 · GHSA-fw66-39g4-cp59

Improper certificate validation in Dell Secure Connect Gateway Policy Manager

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00082 Published 2026-09-29 Fixed in 5.36.00.16 or later CWE-295

TI-2026-51676 CVE-2026-73591 · GHSA-r4xp-whfq-c88r

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains…

LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2026-09-23 Fixed in 5.36.00.16 or later CWE-540

TI-2022-15357 CVE-2022-34462 · GHSA-j754-rjhq-mj6j

Hard-coded credentials in Dell EMC Secure Connect Gateway Policy Manager

LOW 38

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password Vulnerability.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00203 Published 2023-01-18 Fixed in 5.12 CWE-321

TI-2026-69900 CVE-2026-78022 · GHSA-55r5-qmgg-gm62

Fail-open flaw in Dell Secure Connect Gateway Policy Manager

LOW 37

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00198 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-636

TI-2024-16413 CVE-2024-24903 · GHSA-jgh6-gfm4-cj58

Weak password recovery in Dell Secure Connect Gateway Policy Manager

LOW 37

Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00415 Published 2024-03-01 No fix listed CWE-640

TI-2024-16417 CVE-2024-24907 · GHSA-62cw-wm98-px97

Cross-site scripting in Dell Secure Connect Gateway Policy Manager

LOW 36

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00422 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2024-16415 CVE-2024-24905 · GHSA-724c-qwc4-ggg2

Cross-site scripting in Dell Secure Connect Gateway Policy Manager

LOW 36

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00431 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2026-51682 CVE-2026-73598 · GHSA-crgg-m88m-vjfx

Incorrect permission assignment in Dell Secure Connect Gateway Policy Manager

LOW 35

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0008 Published 2026-09-29 Fixed in 5.36.00.16 or later CWE-732

TI-2026-51674 CVE-2026-73588 · GHSA-995x-6xmg-8xwr

Missing authentication in Dell Secure Connect Gateway Policy Manager

LOW 35

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00398 Published 2026-09-23 Fixed in 5.36.00.16 or later CWE-306

TI-2024-16416 CVE-2024-24906 · GHSA-fwqf-m675-qmfg

Cross-site scripting in Dell Secure Connect Gateway Policy Manager

LOW 34

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00422 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

TI-2024-16414 CVE-2024-24904 · GHSA-rq9q-54hg-qm26

Cross-site scripting in Dell Secure Connect Gateway Policy Manager

LOW 34

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

CVSS 3.1HIGH 7.6 Adjacent network High privileges User interaction EPSS 0.00431 Published 2024-03-01 Fixed in 5.22.00.16 CWE-79

Open these records in search →