GCVE - cpe:2.3:o:dell:vxrail_e560_vcf_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dell:vxrail_e560_vcf_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Vxrail E560 Vcf Firmware (`7020070b-ad85-53bb-a9f3-622e42c7c25f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-21111`	vulnerable	2026-06-08 07:08:51.253730	Details available HIGH (7.5) Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. Published: 2025-01-08T17:38:45.985Z Updated: 2025-01-08T18:22:13.650Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000269958/dsa-2025-025-security-update-for-dell-vxrail-for-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21102`	vulnerable	2026-06-08 07:08:51.188819	Details available HIGH (7.5) Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. Published: 2025-01-08T11:25:48.282Z Updated: 2025-01-08T13:53:04.170Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000269793/dsa-2025-027-security-update-for-dell-vxrail-for-multiple-vulnerabilities?ref=emcadvisory_000269793_High_null	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32464`	vulnerable	2026-06-08 06:04:46.225136	Details available LOW (2.7) Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit. Published: 2023-06-23T07:57:36.046Z Updated: 2024-11-08T16:11:10.599Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32463`	vulnerable	2026-06-08 06:04:46.174530	Details available LOW (3.4) Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction. Published: 2023-06-23T07:51:55.652Z Updated: 2024-11-08T16:31:44.783Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.