UF
Product
Unisphere for PowerMax Virtual Appliance
19
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 17Medium 2Low 0
Watch
Add Unisphere for PowerMax Virtual Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-36588 | 8.8 | Jan 22 | Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability Affected: before 9.2.4.19 |
| CVE-2024-25955 | 8.8 | Mar 28 | Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability Affected: before 9.2.4.9 |
| CVE-2024-25946 | 8.8 | Mar 28 | Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability Affected: before 9.2.4.9 |
| CVE-2022-45104 | 8.8 | Feb 11 | Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability Affected: before 9.2.4.26 |
| CVE-2022-31233 | 8.0 | Aug 31 | Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability Affected: before 9.2.3.15 |
| CVE-2021-36338 | 8.0 | Jan 21 | Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability Affected: before 9.1.0.31; 9.2.0.0 before 9.2.3.4 |
| CVE-2021-36339 | 7.8 | Jan 21 | The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts Affected: before 9.1.0.31; 9.2.0.0 before 9.2.3.4 |
| CVE-2021-21531 | 7.8 | Apr 30 | Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability Affected: before 9.1.0.26; 9.2.1.0 before 9.2.1.6 |
| CVE-2022-34363 | 7.5 | May 22 | Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vApp Affected: before 9.2.3.22 EEM: 9.2.4.26 |
| CVE-2023-48671 | 7.5 | Dec 14 | Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability Affected: before 9.2.4.7 |
| CVE-2023-48660 | 7.5 | Dec 14 | Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability Affected: before 9.2.4.7 |
| CVE-2025-36595 | 7.2 | Jun 27 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability Affected: 9.2.4.0 before 9.2.4.17 |
| CVE-2023-48665 | 7.2 | Dec 14 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability Affected: before 9.2.4.7 |
| CVE-2023-48664 | 7.2 | Dec 14 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability Affected: before 9.2.4.7 |
| CVE-2023-48663 | 7.2 | Dec 14 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability Affected: before 9.2.4.7 |
| CVE-2023-48662 | 7.2 | Dec 14 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability Affected: before 9.2.4.7 |
| CVE-2025-36589 | 7.1 | Jan 6 | Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability Affected: 9.2.4.17 before 9.2.4.19 |
Showing 17
