Approved changes feed: RSS · Atom

cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2:*:*:*:*:*:*:*

part: o version: 8.1.2 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Powerscale Onefs (211f66ba-ae3b-5949-825d-3df4e74007f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21562 vulnerable 2026-06-08 05:29:12.720728 Details available
MEDIUM (4.4)
Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT) to provide an untrusted path which can lead to run resources that are not under the application’s direct control.
Published: 2021-08-02T23:45:16.289Z
Updated: 2024-09-17T01:25:32.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21561 vulnerable 2026-06-08 05:29:12.720277 Details available
HIGH (7.8)
Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicious user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE privileges to gain access to sensitive information in the log files.
Published: 2021-11-23T20:00:30.258Z
Updated: 2024-09-16T19:20:53.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21550 vulnerable 2026-06-08 05:29:12.314028 Details available
MEDIUM (6)
Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability can allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges.
Published: 2021-05-06T12:40:36.679Z
Updated: 2024-09-16T20:01:16.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21506 vulnerable 2026-06-08 05:29:12.177840 Details available
HIGH (8.8)
PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV_SYS_SUPPORT and ISI_PRIV_LOGIN_PAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation.
Published: 2021-03-08T21:44:55.278Z
Updated: 2024-09-16T16:29:02.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21503 vulnerable 2026-06-08 05:29:12.174382 Details available
HIGH (7.8)
PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation.
Published: 2021-03-08T21:44:46.106Z
Updated: 2024-09-17T03:43:52.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21502 vulnerable 2026-06-08 05:29:12.170969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26197 vulnerable 2026-06-08 05:23:50.808854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26196 vulnerable 2026-06-08 05:23:50.807992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26195 vulnerable 2026-06-08 05:23:50.807158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26194 vulnerable 2026-06-08 05:23:50.806581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26193 vulnerable 2026-06-08 05:23:50.805589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26191 vulnerable 2026-06-08 05:23:50.801052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.