Priority LOW 31
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential information.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00138 · Published 2025-11-05 · Fixed in 8.1.1 CWE-256
Priority LOW 30
Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00097 · Published 2025-11-05 · Fixed in 8.2 CWE-1240
Priority LOW 32
Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0037 · Published 2025-11-05 · Fixed in 8.1.1 CWE-77
Priority MEDIUM 41
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00327 · Published 2025-11-05 · Fixed in 8.1.1 CWE-269
Priority LOW 39
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.00654 · Published 2025-11-05 · Fixed in 8.2 CWE-78
Priority MEDIUM 40
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.01018 · Published 2025-11-05 · Fixed in 8.2 CWE-78
Priority MEDIUM 41
Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00382 · Published 2025-11-05 · Fixed in 8.2 CWE-78
Priority LOW 25
Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00322 · Published 2025-08-14 · No fix listed CWE-611
Priority LOW 32
CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00372 · Published 2024-08-02 · Fixed in 8.1 CWE-703
Priority LOW 24
Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00117 · Published 2024-06-28 · Fixed in 7.1.9 CWE-1240
Priority LOW 33
CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00424 · Published 2023-05-16 · No fix listed CWE-327
Priority LOW 39
Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00201 · Published 2022-09-01 · Fixed in 7.1.4 CWE-287
Priority MEDIUM 44
Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01047 · Published 2022-09-01 · Fixed in 7.1.3 CWE-287
Priority LOW 34
Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00647 · Published 2022-05-26 · Fixed in 7.1.3 CWE-598
Priority MEDIUM 43
Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02076 · Published 2021-11-23 · Fixed in 7.1.1 CWE-74
Priority MEDIUM 41
Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.0107 · Published 2021-11-23 · Fixed in 7.1.1 CWE-259
THREATIST.IORead the docs