Vulnerabilities > Dell

DATE CVE VULNERABILITY TITLE RISK
2022-06-01 CVE-2022-29098 Weak Password Requirements vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability.
network
low complexity
dell CWE-521
7.5
2022-05-26 CVE-2022-24414 Information Exposure vulnerability in Dell Cloudlink
Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests.
network
low complexity
dell CWE-200
6.5
2022-05-26 CVE-2022-24417 Improper Input Validation vulnerability in Dell products
Dell BIOS contains an improper input validation vulnerability.
local
low complexity
dell CWE-20
6.7
2022-05-26 CVE-2022-24418 Improper Input Validation vulnerability in Dell products
Dell BIOS contains an improper input validation vulnerability.
local
low complexity
dell CWE-20
6.7
2022-05-26 CVE-2022-24422 Improper Authentication vulnerability in Dell Idrac9
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.
network
low complexity
dell CWE-287
critical
9.8
2022-05-26 CVE-2022-26857 Unspecified vulnerability in Dell Openmanage Enterprise 3.5/3.6.1
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability.
network
low complexity
dell
8.8
2022-05-26 CVE-2022-26865 Improper Authentication vulnerability in Dell Supportassist OS Recovery 5.5.1
Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability.
low complexity
dell CWE-287
6.8
2022-05-26 CVE-2022-29082 Improper Certificate Validation vulnerability in Dell EMC Networker
Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote attackers to spoof certificates.
network
low complexity
dell CWE-295
4.6
2022-05-26 CVE-2022-29091 Cross-site Scripting vulnerability in Dell products
Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI.
network
low complexity
dell CWE-79
6.1
2022-04-21 CVE-2022-22558 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dell products
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability.
local
low complexity
dell CWE-119
6.0