Vulnerabilities > Dell > EMC Powerscale Onefs > 9.2.1.18

DATE CVE VULNERABILITY TITLE RISK
2023-04-04 CVE-2023-25941 Unspecified vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability.
local
low complexity
dell
7.8
2023-04-04 CVE-2023-25942 Unspecified vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability.
network
low complexity
dell
6.5
2023-02-01 CVE-2023-22573 Information Exposure Through Log Files vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool.
local
low complexity
dell CWE-532
5.5
2023-02-01 CVE-2023-22574 Information Exposure Through Log Files vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module.
network
low complexity
dell CWE-532
8.1
2023-02-01 CVE-2023-22575 Information Exposure Through Log Files vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog.
network
low complexity
dell CWE-532
8.8
2023-02-01 CVE-2023-22572 Information Exposure Through Log Files vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api.
local
low complexity
dell CWE-532
7.8
2023-02-01 CVE-2022-46679 Unspecified vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability.
network
low complexity
dell
7.5
2022-04-12 CVE-2022-22549 Improper Certificate Validation vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation.
network
high complexity
dell CWE-295
8.1
2022-04-12 CVE-2022-22550 Insufficiently Protected Credentials vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability.
local
low complexity
dell CWE-522
6.7
2022-04-12 CVE-2022-22561 Improper Restriction of Excessive Authentication Attempts vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts.
network
low complexity
dell CWE-307
critical
9.8