Priority LOW 30
Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00605 · Published 2023-04-04 · No fix listed CWE-664
Priority LOW 35
Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2023-04-04 · No fix listed CWE-276
Priority LOW 35
Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2023-04-04 · No fix listed CWE-59
Priority LOW 32
Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00152 · Published 2023-02-28 · No fix listed CWE-276
Priority LOW 36
Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities.
CVSS 3.1HIGH 7.7· Local · High privileges · User interaction · EPSS 0.00393 · Published 2023-02-10 · No fix listed CWE-79
Priority LOW 31
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00191 · Published 2023-02-10 · No fix listed CWE-122
Priority MEDIUM 41
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00626 · Published 2023-02-01 · No fix listed CWE-532
Priority LOW 34
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool.
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2023-02-01 · No fix listed CWE-532
Priority LOW 38
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0066 · Published 2023-02-01 · No fix listed CWE-532
Priority LOW 35
Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2023-02-01 · No fix listed CWE-532
Priority MEDIUM 40
Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0077 · Published 2023-02-01 · No fix listed CWE-410
Priority MEDIUM 43
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00505 · Published 2023-02-01 · No fix listed CWE-295
Priority LOW 35
Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00191 · Published 2023-02-01 · No fix listed CWE-261
Priority LOW 26
Dell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information vulnerability in S3 component.
CVSS 3.1MEDIUM 6.1· Local · Low privileges · User interaction · EPSS 0.00116 · Published 2023-02-01 · No fix listed CWE-532
Priority LOW 29
Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00489 · Published 2023-02-01 · No fix listed CWE-355
Priority LOW 38
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00412 · Published 2023-02-01 · No fix listed CWE-842
Priority LOW 33
Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00637 · Published 2023-02-01 · No fix listed CWE-77
Priority MEDIUM 50
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2023-02-01 · No fix listed CWE-274
Priority MEDIUM 41
Dell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or Throttling vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0103 · Published 2022-10-21 · Fixed in 9.4.0.x CWE-770
Priority LOW 31
Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00182 · Published 2022-10-21 · Fixed in 9.4.0.x CWE-269
Priority LOW 32
Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00428 · Published 2022-10-21 · Fixed in 9.4.0.x CWE-78
Priority LOW 31
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0025 · Published 2022-10-21 · Fixed in 9.3.0.x CWE-532
Priority LOW 24
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative path traversal vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00201 · Published 2022-09-02 · Fixed in 8.2.x, 9.0.0.x +6 CWE-23
Priority MEDIUM 43
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0067 · Published 2022-09-02 · Fixed in 8.2.x, 9.0.0.x +5 CWE-522
Priority LOW 36
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00668 · Published 2022-09-02 · Fixed in 9.0.0.x, 9.1.0.x +5 CWE-532
Load more
THREATIST.IORead the docs