Approved changes feed: RSS · Atom

cpe:2.3:a:dell:powerpath_management_appliance:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductPowerpath Management Appliance (4644b920-69dd-554c-ba24-586645928aa4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-34451 vulnerable 2026-06-08 05:44:53.560390 Details available
MEDIUM (4.8)
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to hijack user sessions or trick a victim application user into unknowingly send arbitrary requests to the server.
Published: 2023-02-10T20:59:08.733Z
Updated: 2025-03-24T18:08:15.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34449 vulnerable 2026-06-08 05:44:53.559683 Details available
MEDIUM (6)
PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenticated admin users can exploit the issue that leads to view and modifying sensitive information stored in the application.
Published: 2023-02-10T20:53:57.070Z
Updated: 2025-03-24T18:09:46.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34448 vulnerable 2026-06-08 05:44:53.559322 Details available
HIGH (8.8)
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability. An unauthenticated non-privileged user could potentially exploit the issue and perform any privileged state-changing actions.
Published: 2023-02-10T20:51:09.763Z
Updated: 2025-03-26T15:13:37.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34447 vulnerable 2026-06-08 05:44:53.558784 Details available
HIGH (7.2)
PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability. An authenticated remote attacker with administrative privileges could potentially exploit the issue and execute commands on the system as the root user.
Published: 2023-02-10T20:48:05.160Z
Updated: 2025-03-26T15:13:59.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34446 vulnerable 2026-06-08 05:44:53.555795 Details available
HIGH (8.8)
PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privileges (e.g., of role Monitoring) can exploit this issue and gain access to sensitive information, and modify the configuration.
Published: 2023-02-10T20:44:34.905Z
Updated: 2025-03-26T15:14:28.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43587 vulnerable 2026-06-08 05:36:43.601281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.