Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Total 1882 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-63701 1 Dell 1 Wyse Management Suite 2026-08-17 N/A 6.3 MEDIUM
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-63700 1 Dell 1 Wyse Management Suite 2026-08-17 N/A 7.8 HIGH
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-66272 1 Dell 1 Wyse Management Suite 2026-08-17 N/A 5.3 MEDIUM
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-56793 1 Dell 1 Openmanage Server Administrator 2026-08-08 N/A 7.7 HIGH
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-56794 1 Dell 1 Openmanage Server Administrator 2026-08-08 N/A 6.5 MEDIUM
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVE-2023-28045 1 Dell 1 Aiops Collector 2026-08-07 N/A 6.3 MEDIUM
Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.
CVE-2026-28264 1 Dell 1 Powerprotect Data Manager 2026-07-24 N/A 3.3 LOW
Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-27102 1 Dell 1 Powerscale Onefs 2026-07-24 N/A 6.6 MEDIUM
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-24511 1 Dell 1 Powerscale Onefs 2026-07-24 N/A 4.4 MEDIUM
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive information vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2026-28261 1 Dell 2 Elastic Cloud Storage, Objectscale 2026-07-24 N/A 7.8 HIGH
Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to secret exposure. The attacker may be able to use the exposed secret to access the vulnerable system with privileges of the compromised account.
CVE-2024-37129 1 Dell 1 Inventory Collector 2026-07-24 N/A 6.7 MEDIUM
Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system.
CVE-2026-35070 1 Dell 1 Smartfabric Storage Software 2026-07-24 N/A 6.4 MEDIUM
Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVE-2022-34363 1 Dell 1 Unisphere For Powermax Virtual Appliance 2026-07-23 N/A 6.5 MEDIUM
Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the  Unisphere for VMAX application running in vApp
CVE-2025-26483 1 Dell 3 Powerflex Appliance Intelligent Catalog, Powerflex Manager, Powerflex Rack 2026-07-23 N/A 6.1 MEDIUM
Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
CVE-2022-31231 1 Dell 1 Elastic Cloud Storage 2026-07-23 N/A 5.9 MEDIUM
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
CVE-2026-40715 1 Dell 1 Thinos 2026-07-22 N/A 7.8 HIGH
Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-40713 1 Dell 1 Thinos 2026-07-22 N/A 6.1 MEDIUM
Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2016-6650 2 Dell, Emc 2 Recoverpoint For Virtual Machines, Recoverpoint 2026-07-10 2.6 LOW 7.5 HIGH
EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.
CVE-2016-6648 2 Dell, Emc 2 Recoverpoint For Virtual Machines, Recoverpoint 2026-07-10 2.1 LOW 4.4 MEDIUM
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may access this sensitive system file and compromise the affected system.
CVE-2016-6649 2 Dell, Emc 2 Recoverpoint For Virtual Machines, Recoverpoint 2026-07-10 7.2 HIGH 6.7 MEDIUM
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.