Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

19 records in Unisphere For Powermax Virtual Appliance · all components

TI-2024-17053 CVE-2024-25955 · GHSA-j9cj-hqr5-3wcm

OS command injection in Dell Virtual Appliance Manager

Priority MEDIUM 43

Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01437 Published 2024-03-28 Fixed in 9.2.4.9, 9.2.4.6 +1 CWE-78
TI-2024-17045 CVE-2024-25946 · GHSA-vx4h-fxv4-24pq

OS command injection in Dell Virtual Appliance Manager

Priority MEDIUM 43

Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01437 Published 2024-03-28 Fixed in 9.2.4.9, 9.2.4.6 +1 CWE-78
TI-2022-22193 CVE-2022-45104 · GHSA-pvfm-9q64-4r88

Command injection in Dell Unisphere for PowerMax vApp

Priority MEDIUM 43

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01382 Published 2023-02-10 No fix listed CWE-77
TI-2025-24896 CVE-2025-36588 · GHSA-xfqp-wv94-qg88

SQL injection in Dell Unisphere for PowerMax

Priority MEDIUM 41

Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00671 Published 2026-01-22 Fixed in 9.2.4.19 CWE-89
TI-2023-26510 CVE-2023-48663 · GHSA-9pw4-548w-gqq4

OS command injection in Dell vApp Manager

Priority LOW 37

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01732 Published 2023-12-14 Fixed in 9.2.4.x CWE-78
TI-2023-26512 CVE-2023-48665 · GHSA-r452-8cw4-6ff2

OS command injection in Dell vApp Manager,

Priority LOW 35

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01732 Published 2023-12-14 Fixed in 9.2.4.x CWE-78
TI-2023-26511 CVE-2023-48664 · GHSA-vvgr-qp83-rvgh

OS command injection in Dell vApp Manager

Priority LOW 35

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01732 Published 2023-12-14 Fixed in 9.2.4.x CWE-78
TI-2023-26509 CVE-2023-48662 · GHSA-3xvw-vxfc-rgc7

OS command injection in Dell vApp Manager

Priority LOW 35

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01732 Published 2023-12-14 Fixed in 9.2.4.x CWE-78
TI-2023-26507 CVE-2023-48660 · GHSA-qjp2-m2mf-m72r

Path traversal in Dell vApp Manger

Priority LOW 35

Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00922 Published 2023-12-14 Fixed in 9.2.4.x CWE-22
TI-2023-26516 CVE-2023-48671 · GHSA-q3cc-722m-mfc6

Information disclosure in Dell vApp Manager

Priority LOW 34

Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00762 Published 2023-12-14 Fixed in 9.2.4.x CWE-200
TI-2025-24897 CVE-2025-36589 · GHSA-mjf9-xjp8-6cr8

XML external entity injection in Dell Unisphere for PowerMax

Priority LOW 33

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00281 Published 2026-01-06 Fixed in 9.2.4.19 CWE-611
TI-2022-15263 CVE-2022-34363 · GHSA-g6ph-2vxq-m462

Improper authorization in Dell Unisphere for PowerMax

Priority LOW 32

Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vApp

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00247 Published 2026-05-22 Fixed in 10.0.0.5 EEM: 10.0.0.968, 9.2.3.22 EEM: 9.2.4.26 +1 CWE-285
TI-2022-15295 CVE-2022-34397 · GHSA-qcx4-x6q7-8hc3

Incorrect authorization in Dell Unisphere for PowerMax

Priority LOW 30

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorize…

CVSS 3.1MEDIUM 6.9 Adjacent network Low privileges User interaction EPSS 0.0023 Published 2023-02-13 Fixed in 10.0.0.5 CWE-863
Open these records in search →