GCVE - cpe:2.3:a:dell:ecs:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:ecs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Ecs (`c26dc956-e0c4-5190-a176-b73dc0290774`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-40636`	vulnerable	2026-06-08 08:01:20.901027	Details available CRITICAL (9.8) Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker. Published: 2026-05-11T08:57:19.112Z Updated: 2026-05-12T03:55:17.566Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-35157`	vulnerable	2026-06-08 07:59:13.657513	Details available MEDIUM (5.8) Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. Published: 2026-05-11T09:33:28.472Z Updated: 2026-05-12T19:49:11.038Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-26946`	vulnerable	2026-06-08 07:53:21.762817	Details available MEDIUM (6.7) Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. Published: 2026-05-11T09:39:22.177Z Updated: 2026-05-12T03:55:14.843Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-43992`	vulnerable	2026-06-08 07:25:10.528648	Details available MEDIUM (5.6) Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit. Published: 2026-05-11T09:27:36.435Z Updated: 2026-05-12T13:43:30.327Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30483`	vulnerable	2026-06-08 07:17:00.489048	Details available MEDIUM (5.5) Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. Published: 2025-07-15T14:30:20.106Z Updated: 2025-07-15T14:44:55.458Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000339124/dsa-2025-242-security-update-for-dell-ecs-and-dell-objectscale-insertion-of-sensitive-information-into-log-file-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26478`	vulnerable	2026-06-08 07:12:51.693861	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26477`	vulnerable	2026-06-08 07:12:51.693514	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26476`	vulnerable	2026-06-08 07:12:51.686542	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52534`	vulnerable	2026-06-08 06:52:15.358117	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51540`	vulnerable	2026-06-08 06:52:12.291022	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38485`	vulnerable	2026-06-08 06:41:47.327492	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-30473`	vulnerable	2026-06-08 06:35:30.411957	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-22459`	vulnerable	2026-06-08 06:29:35.813762	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25934`	vulnerable	2026-06-08 05:56:10.812686	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31231`	vulnerable	2026-06-08 05:43:40.549077	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.