Approved changes feed: RSS · Atom

cpe:2.3:a:dell:security_management_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductSecurity Management Server (7a3f4700-eae4-5d60-83fc-d0d06dbe8b0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36611 vulnerable 2026-06-08 07:21:02.111182 Details available
HIGH (7.3)
Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access ('Link Following') Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation.
Published: 2025-07-30T16:18:09.720Z
Updated: 2026-02-26T17:50:03.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39246 vulnerable 2026-06-08 06:09:36.116895 Details available
MEDIUM (4.6)
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary folder inside a restricted directory, leading to Privilege Escalation
Published: 2023-11-16T08:41:44.681Z
Updated: 2024-08-02T18:02:06.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32479 vulnerable 2026-06-08 06:04:46.371996 Details available
MEDIUM (6.7)
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.
Published: 2024-02-06T08:09:30.931Z
Updated: 2024-08-22T19:24:50.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5327 vulnerable 2026-06-08 05:26:42.145564 Details available
HIGH (8.1)
Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.
Published: 2020-03-06T20:25:13.824Z
Updated: 2024-09-16T20:47:30.272Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.