Recherche « Dell PowerFlex Manager »
24 CVE
-
CVE-2026-32657 7.3 Élevée
Dell AppSync · Dell Metro Node · Dell UCC Edge · Dell VxRail
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
-
CVE-2026-56690 8.5 Élevée
Dell PowerFlex Manager
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information exposure, and Unauthorized access.
-
CVE-2026-56689 7.7 Élevée
Dell PowerFlex Manager
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
-
CVE-2026-56688 9.1 Critique
Dell PowerFlex Manager
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability during OS Repository processing to achieve arbitrary command execution as root, potentially leading to full appliance compromise and lateral movement into managed infrastructure.
-
CVE-2026-35069 8.0 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
-
CVE-2026-35068 5.7 Moyenne
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to information disclosure.
-
CVE-2025-32748 6.1 Moyenne
Dell PowerFlex rack · Dell powerflex rack release certification matrix
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to trigger redirections.
-
CVE-2026-49502 8.1 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.
-
CVE-2026-40641 4.8 Moyenne
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.
-
CVE-2026-35162 6.5 Moyenne
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
-
CVE-2026-35067 8.0 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.
-
CVE-2026-35066 7.1 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
-
CVE-2026-35065 8.8 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.
-
CVE-2026-32804 8.1 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.
-
CVE-2026-22283 7.5 Élevée
Dell PowerFlex · Dell powerflex manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
-
CVE-2024-47477 6.5 Moyenne
Dell PowerFlex Manager
Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to man-in-the-middle attack in tandem with DNS cache poisoning.
-
CVE-2025-46371 5.5 Moyenne
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
-
CVE-2025-32751 5.5 Moyenne
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.
-
CVE-2025-32749 7.5 Élevée
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
-
CVE-2025-32747 7.8 Élevée
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
-
CVE-2025-32746 5.5 Moyenne
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.
-
CVE-2025-32745 6.5 Moyenne
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information tampering.
-
CVE-2025-26483 8.2 Élevée
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
-
CVE-2025-32750 7.5 Élevée
Dell PowerFlex Manager (Appliance) · Dell PowerFlex Manager (Rack) · Dell PowerFlex Manager · Dell powerflex appliance intelligent catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.