Skip to content
OpenAdvisories
Low · 2.7 CVE-2025-27686 EUVD-2025-10030GHSA-qw6j-957m-52hg

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutraliz…

Published Apr 7, 2025 · Updated Apr 7, 2025 · Assigned by dell

Description

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected products

VendorProductAffectedFixed
Dell Unisphere for PowerMax N/A – < 9.2.4.15, N/A – < 10.2.0.9 9.2.4.15

References