Approved changes feed: RSS · Atom

cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductUnisphere For Powermax Virtual Appliance (bbb1b0d3-0b7d-5943-b6e1-68be99e3ee5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36595 vulnerable 2026-06-08 07:21:02.079170 Details available
HIGH (7.2)
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Published: 2025-06-27T13:51:28.738Z
Updated: 2026-02-26T17:50:21.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36589 vulnerable 2026-06-08 07:21:02.068737 Details available
HIGH (7.6)
Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control.
Published: 2026-01-06T16:20:24.899Z
Updated: 2026-01-06T16:55:17.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36588 vulnerable 2026-06-08 07:21:02.066596 Details available
HIGH (8.8)
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Published: 2026-01-22T15:52:01.141Z
Updated: 2026-02-26T14:44:32.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25955 vulnerable 2026-06-08 06:31:24.153182 Details available
HIGH (7.2)
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrade at the earliest opportunity.
Published: 2024-03-28T19:05:10.021Z
Updated: 2024-08-01T23:52:06.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25946 vulnerable 2026-06-08 06:31:24.132291 Details available
HIGH (7.2)
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrade at the earliest opportunity.
Published: 2024-03-28T19:00:18.175Z
Updated: 2025-03-25T14:43:03.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48671 vulnerable 2026-06-08 06:14:27.544191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48665 vulnerable 2026-06-08 06:14:27.525002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48664 vulnerable 2026-06-08 06:14:27.521809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48663 vulnerable 2026-06-08 06:14:27.521455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48662 vulnerable 2026-06-08 06:14:27.520792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48661 vulnerable 2026-06-08 06:14:27.520192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48660 vulnerable 2026-06-08 06:14:27.514581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45104 vulnerable 2026-06-08 05:50:35.647328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34397 vulnerable 2026-06-08 05:44:52.908249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34363 vulnerable 2026-06-08 05:44:52.704417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31233 vulnerable 2026-06-08 05:43:40.554870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36339 vulnerable 2026-06-08 05:32:51.514814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36338 vulnerable 2026-06-08 05:32:51.511552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21531 vulnerable 2026-06-08 05:29:12.282632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.