6.5
Moyenne
CVE-2021-21588 Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI
Description
Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerFlex | 3.5.x | Pas de correctif indiqué |
Autres CVE de PowerFlex
Les 11 CVE de PowerFlex →
CVE-2026-35069
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in…
5.7
Moyenne
CVE-2026-35068
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in…
3.5
Faible
CVE-2026-35066
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
7.1
Élevée
CVE-2026-35067
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
5.7
Moyenne