Approved changes feed: RSS · Atom

cpe:2.3:h:dell:vxrail_e660:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductVxrail E660 (b710d852-453b-590d-b943-82e44706fcd9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-21111 not_vulnerable 2026-06-03 14:59:17.332176 Details available
HIGH (7.5)
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2025-01-08T17:38:45.985Z
Updated: 2025-01-08T18:22:13.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21102 not_vulnerable 2026-06-03 14:59:17.281363 Details available
HIGH (7.5)
Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2025-01-08T11:25:48.282Z
Updated: 2025-01-08T13:53:04.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32464 not_vulnerable 2026-06-03 14:51:58.917489 Details available
LOW (2.7)
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
Published: 2023-06-23T07:57:36.046Z
Updated: 2024-11-08T16:11:10.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32463 not_vulnerable 2026-06-03 14:51:58.857250 Details available
LOW (3.4)
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.
Published: 2023-06-23T07:51:55.652Z
Updated: 2024-11-08T16:31:44.783Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.