Priority LOW 22
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00341 · Published 2023-02-10 · No fix listed CWE-79
Priority LOW 32
PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00419 · Published 2023-02-10 · No fix listed CWE-183
Priority LOW 28
PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00176 · Published 2023-02-10 · No fix listed CWE-798
Priority MEDIUM 40
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00314 · Published 2023-02-10 · No fix listed CWE-352
Priority MEDIUM 43
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01657 · Published 2023-02-10 · No fix listed CWE-78
Priority LOW 39
PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00794 · Published 2023-02-10 · No fix listed CWE-285
Priority LOW 14
PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00435 · Published 2023-02-10 · No fix listed CWE-598
Priority LOW 35
Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00246 · Published 2021-12-21 · Fixed in 3.2 P01 CWE-321
THREATIST.IORead the docs