UO
Product
Unity Operating Environment
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 36Medium 12Low 0
Watch
Add Unity Operating Environment to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-36604 | 9.8 | Aug 4 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.1.0 |
| CVE-2024-49601 | 9.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-22398 | 9.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2022-29084 | 9.8 | Jun 2 | Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI Affected: before 5.2.0.0.5.173 |
| CVE-2025-24383 | 9.1 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-24381 | 8.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an URL Redirection to Untrusted Site ('Open Redirect') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2026-21418 | 7.8 | Jan 30 | Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.3.0 |
| CVE-2026-22277 | 7.8 | Jan 30 | Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.3.0 |
| CVE-2025-46423 | 7.8 | Oct 30 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.2.0 |
| CVE-2025-46422 | 7.8 | Oct 30 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.2.0 |
| CVE-2025-43942 | 7.8 | Oct 30 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.2.0 |
| CVE-2025-43941 | 7.8 | Oct 30 | Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.2.0 |
| CVE-2025-43940 | 7.8 | Oct 30 | Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.2.0 |
| CVE-2025-43939 | 7.8 | Oct 30 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.2.0 |
| CVE-2025-36607 | 7.8 | Aug 4 | Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nas utility Affected: before 5.5.1.0 |
| CVE-2025-36606 | 7.8 | Aug 4 | Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nfssupport utility Affected: before 5.5.1.0 |
| CVE-2025-24386 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-24385 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-24380 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-24379 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-24378 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-24377 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2025-23383 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2024-49565 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2024-49564 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2024-49563 | 7.8 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2024-22228 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22227 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22225 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_supportassist utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22224 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22223 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22222 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-0170 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cava utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-0168 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains a Command Injection Vulnerability in svc_oscheck utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-0167 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-0166 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_tcpdump utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-0165 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-0164 | 7.8 | Feb 12 | Dell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its svc_topstats utility Affected: before 5.4.0.0.5.094 |
| CVE-2023-43066 | 7.8 | Oct 23 | Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability Affected: before 5.3.0.0.5.120 |
| CVE-2023-43074 | 7.5 | Oct 23 | Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability Affected: before 5.3.0.0.5.120 |
| CVE-2025-24382 | 7.3 | Mar 28 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: before 5.5.0.0.5.259 |
| CVE-2022-29085 | 6.7 | Jun 2 | Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system Affected: before 5.2.0.0.5.173 |
| CVE-2021-21547 | 6.7 | Apr 30 | Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the… Affected: before 5.0.7.0.5.008 |
| CVE-2024-22226 | 6.5 | Feb 12 | Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22221 | 6.5 | Feb 12 | Dell Unity, versions prior to 5.4, contains SQL Injection vulnerability Affected: before 5.4.0.0.5.094 |
| CVE-2023-43067 | 6.5 | Oct 23 | Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability Affected: before 5.3.0.0.5.120 |
| CVE-2025-36605 | 6.1 | Aug 4 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper… Affected: before 5.5.1.0 |
| CVE-2022-29091 | 6.1 | May 26 | Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI Affected: before 5.2.0.0.5.173 |
| CVE-2023-43082 | 5.9 | Nov 22 | Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component Affected: before 5.3.0.0.5.120 |
| CVE-2024-22230 | 5.4 | Feb 12 | Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability Affected: before 5.4.0.0.5.094 |