dell unisphere for powermax
productUScpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical5high1medium0low
updated 2026-10-30
01
vulnerabilities (15)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2026-54469US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potenti… | ||||||
| CVE-2021-21531US | high7.8 | — | ||||
Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnera… | ||||||
| CVE-2025-36588US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged… | ||||||
| CVE-2026-54468US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this v… | ||||||
| CVE-2026-26359US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially expl… | ||||||
| CVE-2026-26358US | —OT elevated | — | ||||
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerab… | ||||||
| CVE-2026-26362US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulner… | ||||||
| CVE-2021-36338US | high8.0 | — | ||||
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate… | ||||||
| CVE-2022-31233US | high8.0 | — | ||||
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate thei… | ||||||
| CVE-2026-54470US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote… | ||||||
| CVE-2025-27686US | medium4.7 | — | ||||
Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP… | ||||||
| CVE-2026-26360US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially expl… | ||||||
| CVE-2025-36589US | high7.1 | — | ||||
Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access cou… | ||||||
| CVE-2026-26361US | — | — | ||||
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially expl… | ||||||
| CVE-2021-36339US | high7.8 | — | ||||
The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-602Client-Side Enforcement of Server-Side Security3 CVEs
- CWE-73External Control of File Name or Path3 CVEs
- CWE-611Improper Restriction of XML External Entity Reference2 CVEs
- CWE-669Incorrect Resource Transfer Between Spheres2 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory1 CVEs
- CWE-23Relative Path Traversal1 CVEs
- CWE-250Execution with Unnecessary Privileges1 CVEs
- CWE-502Deserialization of Untrusted Data1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE15 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan