Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

24 records

Vendor: Dell Component: Objectscale Clear all filters
TI-2026-49194 CVE-2026-70416 · GHSA-3mf3-c5hx-g6jm

Deserialization of untrusted data in Dell ObjectScale

Priority MEDIUM 50

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00849 Published 2026-09-16 Fixed in 4.4.0.0 or later CWE-502
TI-2026-53258 CVE-2026-76104 · GHSA-c4qj-8235-frwj

Incorrect permission assignment in Dell ObjectScale

Priority LOW 25

Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00355 Published 2026-09-16 Fixed in 4.4.0.0 or later CWE-732
TI-2025-28502 CVE-2025-43936 · GHSA-5rgh-vcq9-r69c

Improper authentication in Dell ObjectScale

Priority MEDIUM 42

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00488 Published 2026-09-16 Fixed in 4.4.0.0 or later CWE-287
TI-2026-40479 CVE-2026-56089 · GHSA-vhrh-hmg7-c32w

Path traversal in Dell ObjectScale

Priority LOW 15

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00179 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-35
TI-2026-42720 CVE-2026-59911 · GHSA-9m22-m7q3-rf8x

Sensitive information in log files in Dell ObjectScale

Priority LOW 24

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-532
TI-2026-42718 CVE-2026-59909 · GHSA-r6xr-qx9m-cphx

Path traversal in Dell ObjectScale

Priority LOW 30

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00159 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-35
TI-2026-40480 CVE-2026-56090 · GHSA-f5v9-7r7w-6p6v

Uncontrolled search path in Dell ObjectScale

Priority LOW 33

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00173 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-427
TI-2026-40866 CVE-2026-56685 · GHSA-h2v5-fw2x-c3hw

OS command injection in Dell ObjectScale

Priority LOW 35

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00718 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-78
TI-2026-42719 CVE-2026-59910 · GHSA-fv9w-97c5-5ggv

OS command injection in Dell ObjectScale

Priority LOW 37

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00647 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-78
TI-2026-40867 CVE-2026-56686 · GHSA-ff4p-qfvc-3hh3

OS command injection in Dell ObjectScale

Priority LOW 37

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00647 Published 2026-08-17 Fixed in 4.3.0.1 or later CWE-78
TI-2026-21432 CVE-2026-26946 · GHSA-gm85-wrgm-h2qc

Improper privilege management in Dell ECS

Priority LOW 30

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00104 Published 2026-05-11 Fixed in 4.3.0.0 or later CWE-269
TI-2026-27313 CVE-2026-35157 · GHSA-vm5f-653c-mwv3

CSV injection in Dell ECS

Priority MEDIUM 43

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00317 Published 2026-05-11 Fixed in 4.3.0.0 or later CWE-1236
TI-2026-29362 CVE-2026-40636 · GHSA-mw27-v6r3-mmpp

Hard-coded credentials in Dell ECS

Priority MEDIUM 48

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00223 Published 2026-05-11 Fixed in 4.3.0.0 or later CWE-798
TI-2026-22573 CVE-2026-28261 · GHSA-j4mw-2jfj-wq9h

Sensitive information in log files in Dell Elastic Cloud Storage

Priority LOW 35

Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into Log File vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00109 Published 2026-04-08 Fixed in 4.2.0.1 or later, 4.1.0.3 CWE-532
TI-2026-17885 CVE-2026-22276 · GHSA-m6mc-jpfq-vw85

Cleartext storage of sensitive information in Dell ObjectScale

Priority LOW 24

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Information vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00102 Published 2026-01-23 Fixed in 4.2.0.0 CWE-312
TI-2026-17883 CVE-2026-22274 · GHSA-6vrm-p9h8-2v3j

Cleartext transmission of sensitive information in Dell ObjectScale

Priority LOW 34

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00174 Published 2026-01-23 Fixed in 4.2.0.0 CWE-319
TI-2026-17881 CVE-2026-22271 · GHSA-4v9q-rfjv-2646

Cleartext transmission of sensitive information in Dell ObjectScale

Priority LOW 34

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00214 Published 2026-01-23 Fixed in 4.2.0.0 CWE-319
TI-2025-19423 CVE-2025-26476 · GHSA-99hf-385j-mp2j

Hard-coded credentials in Dell ECS

Priority LOW 37

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00134 Published 2025-08-04 Fixed in 3.8.1.5, 4.0.0.0 or later CWE-321
TI-2025-21780 CVE-2025-30483 · GHSA-j5mc-p7q3-p89m

Sensitive information in log files in Dell ECS

Priority LOW 24

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00142 Published 2025-07-15 Fixed in 3.8.1.5, 4.0.0.1 CWE-532
TI-2025-19424 CVE-2025-26477 · GHSA-79wx-ch7c-g94x

Improper input validation in Dell ECS

Priority MEDIUM 40

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00431 Published 2025-04-17 Fixed in 4.0 CWE-20
TI-2025-19425 CVE-2025-26478 · GHSA-j639-f4gq-49cp

Improper certificate validation in Dell ECS

Priority LOW 28

Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0013 Published 2025-04-17 Fixed in 4.0 CWE-295