Veille CVE

Recherche « Dell elastic cloud storage »

6 CVE

  1. CVE-2025-36591 4.4 Moyenne

    Dell Elastic Cloud Storage (ECS)

    Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

  2. CVE-2022-31231 7.5 Élevée

    Dell ECS · Dell elastic cloud storage

    Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.

  3. CVE-2026-40636 7.8 Élevée

    Dell ECS · Dell ObjectScale · Dell elastic cloud storage

    Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.

  4. CVE-2026-35157 9.8 Critique

    Dell ECS · Dell ObjectScale · Dell elastic cloud storage

    Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.

  5. CVE-2026-26946 6.7 Moyenne

    Dell ECS · Dell ObjectScale · Dell elastic cloud storage

    Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

  6. CVE-2025-43992 5.6 Moyenne

    Dell ECS · Dell ObjectScale · Dell elastic cloud storage

    Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.