Vulnerabilities > Dell

DATE CVE VULNERABILITY TITLE RISK
2020-03-06 CVE-2020-5328 Missing Authentication for Critical Function vulnerability in Dell EMC Isilon Onefs
Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required.
network
low complexity
dell CWE-306
critical
9.8
2020-03-06 CVE-2020-5327 Deserialization of Untrusted Data vulnerability in Dell Security Management Server 10.2.0
Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability.
network
low complexity
dell CWE-502
critical
9.8
2020-02-21 CVE-2020-5326 Missing Authentication for Critical Function vulnerability in Dell products
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu.
low complexity
dell CWE-306
5.3
2020-02-21 CVE-2020-5324 Link Following vulnerability in Dell products
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability.
local
high complexity
dell CWE-59
4.4
2020-02-06 CVE-2020-5319 Improper Validation of Array Index vulnerability in Dell products
Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server.
network
low complexity
dell CWE-129
7.5
2020-02-06 CVE-2020-5318 Incorrect Authorization vulnerability in Dell EMC Isilon Onefs
Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations.
network
low complexity
dell CWE-863
7.5
2020-02-06 CVE-2020-5317 Cross-site Scripting vulnerability in Dell EMC Elastic Cloud Storage 3.4.0.0
Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability.
network
low complexity
dell CWE-79
4.8
2020-01-30 CVE-2015-0949 Improper Privilege Management vulnerability in multiple products
The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver.
local
low complexity
dell hp CWE-269
7.8
2020-01-15 CVE-2009-1120 Unspecified vulnerability in Dell EMC Replistor
EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.
network
low complexity
dell
critical
9.8
2020-01-10 CVE-2019-18588 Cross-site Scripting vulnerability in Dell EMC Powermax and EMC Unisphere for Powermax
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability.
network
low complexity
dell CWE-79
5.4