Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Total 1526 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-32852 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 5.9 MEDIUM
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could potentially exploit this vulnerability, leading to data leaks.
CVE-2023-32486 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 6.7 MEDIUM
Dell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low privilege local attacker could potentially exploit this vulnerability, leading to escalation of privileges.
CVE-2023-32457 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 7.5 HIGH
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vulnerability, leading to escalation of privileges.
CVE-2024-49603 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 4.3 MEDIUM
Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x contain an incorrect specified argument vulnerability. A remote low privileged legitimate user could potentially exploit this vulnerability, leading to information disclosure.
CVE-2024-37132 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 6.7 MEDIUM
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service and Elevation of privileges.
CVE-2023-32495 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 7.8 HIGH
Dell PowerScale OneFS, 8.2.x-9.5.x, contains a exposure of sensitive information to an unauthorized Actor vulnerability. An authorized local attacker could potentially exploit this vulnerability, leading to escalation of privileges.
CVE-2024-25964 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 5.3 MEDIUM
Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
CVE-2024-25953 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 6.0 MEDIUM
Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering.
CVE-2024-37133 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 6.7 MEDIUM
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to unauthorized gain of root-level access.
CVE-2024-25966 1 Dell 1 Powerscale Onefs 2026-02-20 N/A 5.3 MEDIUM
Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
CVE-2026-22269 1 Dell 1 Powerprotect Data Manager 2026-02-20 N/A 4.7 MEDIUM
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-22266 1 Dell 1 Powerprotect Data Manager 2026-02-20 N/A 4.7 MEDIUM
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-22267 1 Dell 1 Powerprotect Data Manager 2026-02-20 N/A 8.1 HIGH
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-22268 1 Dell 1 Powerprotect Data Manager 2026-02-20 N/A 6.3 MEDIUM
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service of a Dell Enterprise Support connection.
CVE-2026-22769 1 Dell 1 Recoverpoint For Virtual Machines 2026-02-18 N/A 10.0 CRITICAL
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.
CVE-2026-23857 1 Dell 1 Update Package Framework 2026-02-18 N/A 8.2 HIGH
Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-22276 1 Dell 2 Elastic Cloud Storage, Objectscale 2026-02-18 N/A 5.5 MEDIUM
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-22275 1 Dell 2 Elastic Cloud Storage, Objectscale 2026-02-18 N/A 4.4 MEDIUM
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information in Source Code vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-22274 1 Dell 2 Elastic Cloud Storage, Objectscale 2026-02-18 N/A 6.5 MEDIUM
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit.
CVE-2026-22273 1 Dell 2 Elastic Cloud Storage, Objectscale 2026-02-18 N/A 8.8 HIGH
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.