Dell Powerflex Rack vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell Powerflex Rack: 9 record(s), with affected versions and fixes.cpe:2.3:a:dell:powerflex_rack
CVE-2025-32748
Medium · 6.1
CWE-601 Jun 17, 2026
Open Redirect in Dell Powerflex Rack Release Certification Matrix
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to trigger redirections.
CVE-2025-46371
Medium · 5.5
CWE-327 May 22, 2026
Use of a Broken or Risky Cryptographic Algorithm in Dell Powerflex Appliance Intelligent Catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
CVE-2025-32751
Medium · 5.5
CWE-922 May 22, 2026
Insecure Storage of Sensitive Information in Dell Powerflex Appliance Intelligent Catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.
CVE-2025-32749
High · 7.5
CWE-276 May 22, 2026
Incorrect Default Permissions in Dell Powerflex Appliance Intelligent Catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2025-32747
High · 7.8
CWE-266 May 22, 2026
Dell PowerFlex Manager, version(s)
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2025-32746
Medium · 5.5
CWE-922 May 22, 2026
Insecure Storage of Sensitive Information in Dell Powerflex Appliance Intelligent Catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.
CVE-2025-32745
Medium · 6.5
CWE-295 May 22, 2026
Improper Certificate Validation in Dell Powerflex Appliance Intelligent Catalog
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2025-26483
High · 8.2
CWE-601 May 22, 2026
Open Redirect in Dell Powerflex Appliance Intelligent Catalog
Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
CVE-2025-32750
High · 7.5
CWE-548 May 20, 2026
Dell PowerFlex Manager, version(s)
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.