CVE-2025-32749

7.5 Élevée

Publiée le 22/05/2026 à 16:16 · Modifiée le 05/10/2026 à 16:10 · Analysée par le NVD · Source : security_alert@emc.com

Description

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Traduire en français

Produits concernés

Dell PowerFlex Manager (Appliance)
Dell PowerFlex Manager (Rack)
Dell PowerFlex Manager
Dell powerflex appliance intelligent catalog
Dell powerflex rack

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security_alert@emc.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L`
3.1	7.5 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-276

Références

https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories