2.7
Faible
CVE-2025-27686 Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an…
Description
Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Unisphere for PowerMax 10.2 | premières → < 10.2.0.9 | 10.2.0.9 |
| Unisphere for PowerMax 9.2 | premières → < 9.2.4.15 | 9.2.4.15 |
Autres CVE de Unisphere for PowerMax
Les 19 CVE de Unisphere for PowerMax →
CVE-2026-54470
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity…
5.3
Moyenne
CVE-2026-54469
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability
8.8
Élevée
CVE-2026-54468
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability
6.5
Moyenne
CVE-2022-34363
Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the …
6.5
Moyenne