Vulnerabilities

TI-2022-15348 CVE-2022-34451 · GHSA-q972-6f2p-c9wf

Cross-site scripting in Dell PowerPath Management Appliance

LOW 22

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00341 Published 2023-02-10 No fix listed CWE-79

TI-2022-15347 CVE-2022-34450 · GHSA-hgww-96v3-rf38

LOW 32

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00419 Published 2023-02-10 No fix listed CWE-183

TI-2022-15346 CVE-2022-34449 · GHSA-wvfq-hv4m-w288

LOW 28

PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00176 Published 2023-02-10 No fix listed CWE-798

TI-2022-15345 CVE-2022-34448 · GHSA-x72p-m2qq-vfvv

MEDIUM 40

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00314 Published 2023-02-10 No fix listed CWE-352

TI-2022-15344 CVE-2022-34447 · GHSA-8vjc-v5gf-pvmg

MEDIUM 43

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01657 Published 2023-02-10 No fix listed CWE-78

TI-2022-15343 CVE-2022-34446 · GHSA-7gqf-4cmv-g9fm

LOW 39

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00794 Published 2023-02-10 No fix listed CWE-285