6.1
Medium
CVE-2025-26483 Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability
Description
Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerFlex Manager (Appliance) | Versions not published | |
| PowerFlex Manager (Rack) 3.8 | earliest → < 3.8.3.0 | 3.8.3.0 |
| PowerFlex Manager (Rack) 3.7 | earliest → < 3.7.8.0 | 3.7.8.0 |
| PowerFlex Manager 4.6 | earliest → 4.6.2 | No fix stated |
Other CVEs of PowerFlex Manager (Appliance)
The 8 CVEs of PowerFlex Manager (Appliance) →
CVE-2025-32751
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability
5.5
Medium
CVE-2025-46371
Dell PowerFlex Manager,…
3.6
Low
CVE-2025-32745
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability
4.2
Medium
CVE-2025-32746
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability
4.0
Medium