6.3
Medium
CVE-2021-36338 Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability
Description
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Unisphere for PowerMax 9.2 | earliest → < 9.2.2.2 | 9.2.2.2 |
Other CVEs of Unisphere for PowerMax
The 19 CVEs of Unisphere for PowerMax →
CVE-2026-54470
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity…
5.3
Medium
CVE-2026-54469
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability
8.8
High
CVE-2026-54468
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability
6.5
Medium
CVE-2022-34363
Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the …
6.5
Medium