Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,098

Export CSV
CVE-2021-21508

Plain-text Password Storage Vulnerability in Dell VxRail Manager Exposes User Credentials

Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Vxrail
CVE-2022-31231

Improper Access Control Allows Unauthorized Read in Dell ECS IAM

Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Ecs Elastic Cloud Storage
CVE-2025-32746

Insecure Storage of Sensitive Information in Dell PowerFlex Manager

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2025-26483

Open Redirect in Dell PowerFlex Manager Enabling Phishing

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2025-32745

Improper Certificate Validation in Dell PowerFlex Manager Enabling Information Tampering

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information tampering.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2025-32747

Incorrect Privilege Assignment in Dell PowerFlex Manager Up to 4.6.2

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2025-32749

Information Exposure via Directory Listing in Dell PowerFlex Manager

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2025-32751

Insecure Storage of Sensitive Information in Dell PowerFlex Manager

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2025-46371

Weak SSH Cryptographic Algorithm Enables Local Privilege Escalation in PowerFlex Manager

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVSS 3.1 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerflex Appliance Intelligent Catalog Powerflex Manager Powerflex Manager Appliance and 2 more
CVE-2026-35070

Command Injection Vulnerability in Dell SmartFabric Storage Software, Enabling Local Privileged File System Access

Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Smartfabric Storage Software
CVE-2026-41119

Improper SSL Certificate Validation in Dell Live Optics Collector

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Live Optics
CVE-2025-43992

Authentication Bypass in Geo Replication Allows Unauthorized Data Access

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Ecs Elastic Cloud Storage Objectscale
CVE-2026-32658

Missing Authorization Leading to Privilege Escalation in Dell Automation Platform

Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Automation Platform
CVE-2026-40638

Privilege Escalation Vulnerability in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Insightiq Powerscale Insightiq
CVE-2026-35071

OS Command Injection in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Insightiq Powerscale Insightiq
CVE-2026-35157

Improper Neutralization of Formula Elements in CSV File Allowing Remote Execution

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Ecs Elastic Cloud Storage Objectscale
CVE-2026-26946

Privilege Escalation in Dell ECS and ObjectScale via Improper Privilege Management

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Ecs Elastic Cloud Storage Objectscale
CVE-2026-40636

Use of Hard‑Coded Credentials in Dell ECS and ObjectScale Allows Local File System Access

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Ecs Elastic Cloud Storage Objectscale
CVE-2026-32803

Insufficient Logging in Dell PowerScale OneFS Leading to Information Tampering

Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerscale Onefs