Vulnerabilities > Dell > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-26182 Files or Directories Accessible to External Parties vulnerability in Dell EMC Networker
Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability.
network
low complexity
dell CWE-552
6.5
2020-10-08 CVE-2020-5389 Information Exposure Through Log Files vulnerability in Dell EMC Openmanage Integration for Microsoft System Center
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability.
network
low complexity
dell CWE-532
6.5
2020-10-01 CVE-2020-5387 Improper Handling of Exceptional Conditions vulnerability in Dell XPS 13 9370 Firmware
Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability.
local
low complexity
dell CWE-755
4.4
2020-09-02 CVE-2020-5379 Unspecified vulnerability in Dell Inspiron 7352 Bios
Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability.
low complexity
dell
6.8
2020-09-02 CVE-2020-5378 Use After Free vulnerability in Dell G7 17 7790 Bios
Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability.
low complexity
dell CWE-416
6.8
2020-09-02 CVE-2020-5376 Use After Free vulnerability in Dell Inspiron 7347 Bios
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability.
low complexity
dell CWE-416
6.8
2020-08-27 CVE-2020-5383 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dell EMC Isilon and EMC Powerscale Onefs
Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability in the Likewise component.
network
low complexity
dell CWE-119
5.3
2020-07-09 CVE-2020-5366 Path Traversal vulnerability in Dell Idrac9 Firmware
Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability.
network
low complexity
dell CWE-22
6.5
2020-07-06 CVE-2020-5356 Files or Directories Accessible to External Parties vulnerability in Dell products
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability.
network
low complexity
dell CWE-552
6.5
2020-06-23 CVE-2020-5345 Missing Authorization vulnerability in Dell products
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an authorization bypass vulnerability.
network
low complexity
dell CWE-862
5.4