UO
Product
Unity Operating Environment
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 36Medium 12Low 0
Watch
Add Unity Operating Environment to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29085 | 6.7 | Jun 2 | Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system Affected: before 5.2.0.0.5.173 |
| CVE-2021-21547 | 6.7 | Apr 30 | Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the… Affected: before 5.0.7.0.5.008 |
| CVE-2024-22226 | 6.5 | Feb 12 | Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility Affected: before 5.4.0.0.5.094 |
| CVE-2024-22221 | 6.5 | Feb 12 | Dell Unity, versions prior to 5.4, contains SQL Injection vulnerability Affected: before 5.4.0.0.5.094 |
| CVE-2023-43067 | 6.5 | Oct 23 | Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability Affected: before 5.3.0.0.5.120 |
| CVE-2025-36605 | 6.1 | Aug 4 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper… Affected: before 5.5.1.0 |
| CVE-2022-29091 | 6.1 | May 26 | Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI Affected: before 5.2.0.0.5.173 |
| CVE-2023-43082 | 5.9 | Nov 22 | Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component Affected: before 5.3.0.0.5.120 |
| CVE-2024-22230 | 5.4 | Feb 12 | Dell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability Affected: before 5.4.0.0.5.094 |
| CVE-2024-0169 | 5.4 | Feb 12 | Dell Unity, version(s) 5.3 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability Affected: before 5.4.0.0.5.094 |
| CVE-2023-43065 | 5.4 | Oct 23 | Dell Unity prior to 5.3 contains a Cross-site scripting vulnerability Affected: before 5.3.0.0.5.120 |
| CVE-2024-22229 | 4.3 | Jan 24 | Dell Unity, versions prior to 5.4, contain a vulnerability whereby log messages can be spoofed by an authenticated attacker Affected: 5.3.0.0.5.120 |
Showing 12