Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

17 records

Vendor: Dell Component: Container Storage Modules Clear all filters
TI-2026-68472 CVE-2026-63690 · GHSA-94r2-xh6f-9fg6

Missing authentication in Dell Container Storage Modules

Priority LOW 32

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00191 Published 2026-10-06 Fixed in 1.18.0 or later CWE-306
TI-2026-68473 CVE-2026-63691 · GHSA-368c-8xh9-mmpg

Missing authorization in Dell CSI Driver for PowerMax csireverseproxy

Priority MEDIUM 40

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy .

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00168 Published 2026-10-06 Fixed in 1.18.0 or later CWE-862
TI-2026-68471 CVE-2026-63689 · GHSA-p439-6qgj-6pqg

Sensitive data logged in Dell Container Storage Modules

Priority LOW 28

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00227 Published 2026-10-06 Fixed in 1.18.0 or later CWE-532
TI-2026-68474 CVE-2026-70411 · GHSA-mv3c-r45j-34f2

Missing authentication in Dell Container Storage Modules

Priority LOW 30

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService).

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00188 Published 2026-10-06 Fixed in 1.18.0 or later CWE-306
TI-2026-68463 CVE-2026-67270 · GHSA-h6p7-jcc3-8xrx

Improper certificate validation in Dell CSM proxy-server

Priority LOW 36

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component.

CVSS 3.1HIGH 8.2 Adjacent network No auth No interaction EPSS 0.00079 Published 2026-10-06 Fixed in 1.18.0 or later CWE-295
TI-2026-68464 CVE-2026-67273 · GHSA-889w-rm79-m2hm

Template injection in Dell Container Storage Modules

Priority MEDIUM 43

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00286 Published 2026-10-06 Fixed in 1.18.0 or later CWE-1336
TI-2026-68458 CVE-2026-61421 · GHSA-hr2q-g63x-jc3v

Hard-coded credentials in Dell Container Storage Modules

Priority MEDIUM 49

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00344 Published 2026-10-06 Fixed in 1.18.0 or later CWE-798
TI-2026-68457 CVE-2026-54472 · GHSA-pggh-jqvf-25j4

Hard-coded credentials in Dell Container Storage Modules csm-docs

Priority MEDIUM 49

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00334 Published 2026-10-06 Fixed in 1.18.0 or later CWE-798
TI-2026-68461 CVE-2026-67269 · GHSA-fwc4-f52f-hjhh

Privilege escalation in Dell CSM Operator gives root on cluster nodes

Priority MEDIUM 43

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00334 Published 2026-10-06 Fixed in 1.18.0 or later CWE-269
TI-2026-68460 CVE-2026-63692 · GHSA-jg8j-mg3m-p3v4

Missing authentication in Dell Container Storage Modules

Priority MEDIUM 49

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0042 Published 2026-10-06 Fixed in 1.18.0 or later CWE-306
TI-2026-68459 CVE-2026-63688 · GHSA-hhg3-7qw5-4hq9

Missing authentication in Dell Container Storage Modules gRPC server

Priority MEDIUM 49

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00487 Published 2026-10-06 Fixed in 1.18.0 or later CWE-306
TI-2022-15325 CVE-2022-34427 · GHSA-prpj-6mvr-8mjf

OS command injection in Dell Container Storage Modules

Priority MEDIUM 45

Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02401 Published 2022-10-11 Fixed in 2.0.0 CWE-78
TI-2022-15324 CVE-2022-34426 · GHSA-rpwm-fwxw-89mp

Path traversal in Dell Container Storage Modules

Priority MEDIUM 43

Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01653 Published 2022-10-11 Fixed in 2.0.0 CWE-22
TI-2022-15274 CVE-2022-34375 · GHSA-qxpm-8p5x-pr6j

Path traversal in Dell Container Storage Modules

Priority MEDIUM 41

Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01355 Published 2022-08-30 Fixed in 1.2 CWE-22
TI-2022-15273 CVE-2022-34374 · GHSA-2m88-rqqx-qfw6

OS command injection in Dell Container Storage Modules

Priority MEDIUM 41

Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01419 Published 2022-08-30 Fixed in 1.2 CWE-78