Vulnerabilities > Dell > EMC Unisphere FOR Powermax

DATE CVE VULNERABILITY TITLE RISK
2023-03-17 CVE-2021-21548 Improper Certificate Validation vulnerability in Dell products
Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability.
network
high complexity
dell CWE-295
7.4
7.4
2023-01-18 CVE-2022-45103 Information Exposure vulnerability in Dell products
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability.
network
low complexity
dell CWE-200
6.5
6.5
2020-06-23 CVE-2020-5367 Improper Certificate Validation vulnerability in Dell products
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability.
network
high complexity
dell CWE-295
8.1
8.1
2020-06-23 CVE-2020-5345 Missing Authorization vulnerability in Dell products
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an authorization bypass vulnerability.
network
low complexity
dell CWE-862
5.5
5.5
2020-01-10 CVE-2019-18588 Cross-site Scripting vulnerability in Dell EMC Powermax and EMC Unisphere for Powermax
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability.
network
dell CWE-79
3.5
3.5