5.7
Medium
CVE-2026-35069 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in…
Description
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerFlex | Versions not published |
Other CVEs of PowerFlex
The 11 CVEs of PowerFlex →
CVE-2026-35068
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in…
3.5
Low
CVE-2026-35066
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
7.1
High
CVE-2026-35067
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
5.7
Medium
CVE-2026-35162
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
4.3
Medium