Vulnerabilities

TI-2024-17067 CVE-2024-25969 · GHSA-qggv-3v78-c7cg

Resource allocation without limits in Dell PowerScale OneFS

LOW 27

Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an allocation of resources without limits or throttling vulnerability.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00215 Published 2024-05-14 No fix listed CWE-770

TI-2024-17063 CVE-2024-25965 · GHSA-mc92-hrx8-xcrm

LOW 27

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability.

CVSS 3.1MEDIUM 6.1 Local High privileges User interaction EPSS 0.00218 Published 2024-05-14 No fix listed CWE-73

TI-2024-17064 CVE-2024-25966 · GHSA-j226-hwhh-899j

MEDIUM 41

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00925 Published 2024-05-14 No fix listed CWE-241

TI-2024-17068 CVE-2024-25970 · GHSA-3cmg-6cwf-442f

LOW 30

Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an improper input validation vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00679 Published 2024-05-14 No fix listed CWE-20

TI-2024-17065 CVE-2024-25967 · GHSA-w6fg-m995-mg4j

LOW 31

Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an execution with unnecessary privileges vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00258 Published 2024-05-14 No fix listed CWE-250

TI-2024-17066 CVE-2024-25968 · GHSA-vx8m-7cr4-h238

LOW 33

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky cryptographic algorithm vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2024-05-14 No fix listed CWE-327