Dell PowerFlex vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell PowerFlex: 10 record(s), with affected versions and fixes.
CVE-2026-35069
High · 8.0
CWE-89 Jun 17, 2026
SQL Injection in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
CVE-2026-35068
Medium · 5.7
CWE-89 Jun 17, 2026
SQL Injection in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2026-49502
High · 8.1
CWE-287 Jun 17, 2026
Improper Authentication in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.
CVE-2026-40641
Medium · 4.8
CWE-327 Jun 17, 2026
Use of a Broken or Risky Cryptographic Algorithm in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.
CVE-2026-35162
Medium · 6.5
CWE-284 Jun 17, 2026
Improper Access Control in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
CVE-2026-35067
High · 8.0
CWE-284 Jun 17, 2026
Improper Access Control in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.
CVE-2026-35066
High · 7.1
CWE-284 Jun 17, 2026
Improper Access Control in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
CVE-2026-35065
High · 8.8
CWE-306 Jun 17, 2026
Missing Authentication for Critical Function in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.
CVE-2026-32804
High · 8.1
CWE-287 Jun 17, 2026
Improper Authentication in Dell Powerflex Manager
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-22283
High · 7.5
CWE-829 Jun 17, 2026
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of…
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.