Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0088 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 36
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00897 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 29
Dell Unity, versions prior to 5.4, contains SQL Injection vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00421 · Published 2024-02-12 · Fixed in 5.4 CWE-89
Priority LOW 29
Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00354 · Published 2024-02-12 · Fixed in 5.4 CWE-23
Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_supportassist utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01013 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00883 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 28
Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00295 · Published 2024-02-12 · Fixed in 5.4 CWE-79
Priority LOW 37
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00644 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 37
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00644 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 38
Dell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its svc_topstats utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01119 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00953 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_tcpdump utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01101 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00806 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 38
Dell Unity, versions prior to 5.4, contains a Command Injection Vulnerability in svc_oscheck utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00837 · Published 2024-02-12 · Fixed in 5.4 CWE-78
Priority LOW 26
Dell Unity, version(s) 5.3 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.0032 · Published 2024-02-12 · Fixed in 5.4 CWE-79
Priority LOW 38
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cava utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00837 · Published 2024-02-12 · Fixed in 5.4 CWE-78