Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

10 records in Storage Manager · all components

TI-2025-28548 CVE-2025-43995 · GHSA-q4x9-46wj-f2cj

Improper authentication in Dell Storage Manager

Priority MEDIUM 50

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00837 Published 2025-10-24 Fixed in 2020 R1.21 CWE-287
TI-2025-28547 CVE-2025-43994 · GHSA-57p7-j2hg-6f2v

Missing authentication in Dell Storage Manager

Priority MEDIUM 44

Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00595 Published 2025-10-24 Fixed in 2020 R1.21 CWE-306
TI-2025-16367 CVE-2025-22476 · GHSA-jh42-fqqp-hv7w

Command injection in Dell Storage Center - Dell Storage Manager

Priority LOW 36

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00556 Published 2025-05-06 Fixed in 2020 R1.21 CWE-77
TI-2017-10494 CVE-2017-14384 · GHSA-mg2m-hjxf-qwfm

Path traversal in Dell Storage Manager

Priority LOW 32

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01808 Published 2018-03-16 Fixed in 16.3.20 CWE-22
TI-2025-29146 CVE-2025-46425 · GHSA-jjx4-28q5-r3gr

XML external entity injection in Dell Storage Manager

Priority LOW 31

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2025-10-24 Fixed in 2020 R1.21 CWE-611
TI-2025-17150 CVE-2025-23379 · GHSA-h54h-whww-pv92

Cross-site scripting in Dell Storage Center - Dell Storage Manager

Priority LOW 23

Dell Storage Center - Dell Storage Manager, version(s) 21.0.20, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.

CVSS 3.1MEDIUM 5.2 Adjacent network No auth User interaction EPSS 0.00262 Published 2025-05-06 Fixed in 2020 R1.21 CWE-79
TI-2025-16370 CVE-2025-22479 · GHSA-494x-qm6q-hp39

Path traversal in Dell Storage Center - Dell Storage Manager

Priority LOW 20

Dell Storage Center - Dell Storage Manager, version(s) 20.0.21, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00278 Published 2025-05-06 Fixed in 2020 R1.21 CWE-22
Open these records in search →