Skip to content
OpenAdvisories

Vendor

Dell

1,945 known vulnerabilities.

1,945 results · Feed

  • High 7.5

    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…

  • High 8.1

    Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability…

  • Medium 6.9

    Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker…

  • High 8.3

    DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated …

  • High 7.8

    The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potential…

  • Medium 6.3

    Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious u…

  • High 8.2

    Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A loca…

  • Medium 5.9

    Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authe…

  • Medium 5.5

    Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticate…

  • Medium 6.5

    Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 wh…

  • Critical 9.8

    Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthentica…

  • Medium 6.7

    Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privilege…

  • Medium 6.7

    Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attack…

  • Medium 6.7

    Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability…

  • High 8.1

    Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote…

  • Medium 6.5

    Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malic…

  • High 8.8

    Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may…

  • Medium 5.3

    Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unau…

  • Medium 6.5

    Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). …

  • Medium 4.3

    Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileg…

  • Medium 5.9

    Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged a…

  • Medium 5.5

    Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local low privileged attacker,…

  • Medium 5.4

    Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privi…

  • High 7.1

    Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticate…

  • Critical 9.1

    Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged a…

  • Critical 9.1

    Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged att…

  • Medium 6.0

    Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user wit…

  • Medium 5.9
    CVE-2021-36301 EPSS 28%

    Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Rac…

  • Medium 6.5
    CVE-2021-36300 EPSS 33%

    iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attac…

  • High 7.1
    CVE-2021-36299 EPSS 30%

    Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerabilit…

  • High 7.8

    Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicio…

  • High 7.8

    Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user m…

  • Medium 6.1

    Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote una…

  • High 7.5

    Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remot…

  • High 7.5

    Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote un…

  • Low 3.3

    Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low priv…

  • Medium 4.9

    Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption fl…

  • Medium 5.9

    Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass v…

  • High 8.8

    Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerabilit…

  • High 8.1

    Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerabil…