Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: Dell Component: Unisphere For Powermax Clear all filters
TI-2026-39327 CVE-2026-54470 · GHSA-rhg3-7wm6-r85w

XML external entity injection in Dell Unisphere for PowerMax

Priority LOW 24

Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00304 Published 2026-07-10 Fixed in 10.3.0.7 or later, 10.3.1.1 Patch 11360 or later CWE-611
TI-2026-39326 CVE-2026-54469 · GHSA-pvj5-9xhr-xjvg

Deserialization of untrusted data in Dell Unisphere for PowerMax

Priority MEDIUM 42

Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00858 Published 2026-07-10 Fixed in 10.3.0.7 or later, 10.3.1.1 Patch 11360 or later CWE-502
TI-2026-39325 CVE-2026-54468 · GHSA-5hj2-5hx5-8jv3

Path traversal in Dell Unisphere for PowerMax

Priority LOW 29

Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2026-07-10 Fixed in 10.3.0.7 or later, 10.3.1.1 Patch 11360 or later CWE-22
TI-2026-21305 CVE-2026-26358 · GHSA-wfhf-6fj8-r5gx

Missing authorization in Dell Unisphere for PowerMax

Priority MEDIUM 40

Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00405 Published 2026-02-19 Fixed in 10.3.0.1 or later CWE-862
TI-2026-21309 CVE-2026-26362 · GHSA-25wp-vwm5-27pw

Path traversal in Dell Unisphere for PowerMax

Priority LOW 35

Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0037 Published 2026-02-19 Fixed in 10.3.0.1 or later CWE-23
TI-2025-24896 CVE-2025-36588 · GHSA-xfqp-wv94-qg88

SQL injection in Dell Unisphere for PowerMax

Priority MEDIUM 41

Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00671 Published 2026-01-22 Fixed in 9.2.4.19 CWE-89
TI-2025-24897 CVE-2025-36589 · GHSA-mjf9-xjp8-6cr8

XML external entity injection in Dell Unisphere for PowerMax

Priority LOW 33

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00281 Published 2026-01-06 Fixed in 9.2.4.19 CWE-611
TI-2025-20485 CVE-2025-27686 · GHSA-qw6j-957m-52hg

LDAP injection in Dell Unisphere for PowerMax

Priority LOW 21

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00296 Published 2025-04-07 Fixed in 9.2.4.15, 10.2.0.9 CWE-90