Approved changes feed: RSS · Atom

cpe:2.3:a:dell:powerflex_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductPowerflex Manager (18d06c0a-02e7-5758-b6b1-b0b8b2e870ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56690 vulnerable 2026-07-29 01:00:29.251561 Details available
HIGH (8.5)
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information exposure, and Unauthorized access.
Published: 2026-07-10T11:43:44.004Z
Updated: 2026-07-10T13:14:31.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56689 vulnerable 2026-07-29 01:00:29.251279 Details available
HIGH (7.7)
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2026-07-10T11:51:27.171Z
Updated: 2026-07-10T13:00:10.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56688 vulnerable 2026-07-29 01:00:29.250667 Details available
CRITICAL (9.1)
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability during OS Repository processing to achieve arbitrary command execution as root, potentially leading to full appliance compromise and lateral movement into managed infrastructure.
Published: 2026-07-10T11:57:41.752Z
Updated: 2026-07-10T17:01:12.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46371 vulnerable 2026-06-08 07:27:08.124419 Details available
LOW (3.6)
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Published: 2026-05-22T13:43:18.346Z
Updated: 2026-05-22T16:24:54.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36599 vulnerable 2026-06-08 07:21:02.093045 Details available
MEDIUM (4.3)
Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the system with privileges of the compromised account.
Published: 2025-07-09T18:30:31.566Z
Updated: 2025-07-09T19:19:13.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32751 vulnerable 2026-06-08 07:19:00.735116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32750 vulnerable 2026-06-08 07:19:00.734719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32749 vulnerable 2026-06-08 07:19:00.734483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32747 vulnerable 2026-06-08 07:19:00.734119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32746 vulnerable 2026-06-08 07:19:00.733714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32745 vulnerable 2026-06-08 07:19:00.733283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26483 vulnerable 2026-06-08 07:12:51.959832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37144 vulnerable 2026-06-08 06:39:46.706462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37143 vulnerable 2026-06-08 06:39:46.704567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.