Skip to content
Sign in
6.5 Medium

CVE-2021-21588 Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI

Description

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Affected products and versions

Product Affected versions Fixed in
PowerFlex 3.5.x No fix stated

Other CVEs of PowerFlex

The 11 CVEs of PowerFlex →
CVE-2026-35069 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in… 5.7 Medium CVE-2026-35068 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in… 3.5 Low CVE-2026-35066 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability 7.1 High CVE-2026-35067 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability 5.7 Medium
Track this CVE