Approved changes feed: RSS · Atom

cpe:2.3:a:dell:repository_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductRepository Manager (70c63795-a72a-5d72-8c94-ff1844984ddd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-86359 vulnerable 2026-10-13 12:28:46.215830 Details available
HIGH (8.5)
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Published: 2026-09-16T16:27:48.704Z
Updated: 2026-09-17T11:39:24.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21420 vulnerable 2026-06-08 07:49:16.363029 Details available
HIGH (7.3)
Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges.
Published: 2026-02-23T14:01:03.820Z
Updated: 2026-02-26T14:44:11.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45376 vulnerable 2026-06-08 07:25:10.996856 Details available
HIGH (7.5)
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Published: 2025-09-29T20:13:36.928Z
Updated: 2026-02-26T17:47:50.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28977 vulnerable 2026-06-08 06:33:28.313073 Details available
LOW (3.3)
Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem with the privileges of the running web application.
Published: 2024-04-24T08:08:35.366Z
Updated: 2024-08-02T01:03:51.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28976 vulnerable 2026-06-08 06:33:28.310951 Details available
HIGH (8.8)
Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized write access to the files stored on the server filesystem with the privileges of the running web application.
Published: 2024-04-24T08:01:53.090Z
Updated: 2024-08-21T15:39:03.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44292 vulnerable 2026-06-08 06:12:39.931917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44282 vulnerable 2026-06-08 06:12:39.908326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22576 vulnerable 2026-06-08 05:54:26.498223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.