CVE Intelligence

Dell Unisphere For Powermax vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dell Unisphere For Powermax: 11 record(s), with affected versions and fixes.
cpe:2.3:a:dell:unisphere_for_powermax

CVE-2026-54470 Medium · 5.3 CWE-611 Jul 10, 2026
XML External Entity (XXE) in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-54469 High · 8.8 CWE-502 Jul 10, 2026
Deserialization of Untrusted Data in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
CVE-2026-54468 Medium · 6.5 CWE-22 Jul 10, 2026
Path Traversal in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files.
CVE-2022-34363 High · 7.5 CWE-285 May 22, 2026
Improper Authorization in Dell Unisphere For Powermax Virtual Appliance
Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the  Unisphere for VMAX application running in vApp
CVE-2026-26362 High · 8.1 CWE-23 Feb 19, 2026
Relative Path Traversal in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized modification of critical system files.
CVE-2026-26361 Medium · 6.5 CWE-73 Feb 19, 2026
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File…
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-26360 High · 8.1 CWE-73 Feb 19, 2026
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File…
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files.
CVE-2026-26359 High · 8.8 CWE-73 Feb 19, 2026
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File…
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files.
CVE-2026-26358 High · 8.8 CWE-862 Feb 19, 2026
Missing Authorization in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2025-36588 High · 8.8 CWE-89 Jan 22, 2026
SQL Injection in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2025-36589 High · 7.1 CWE-611 Jan 6, 2026
XML External Entity (XXE) in Dell Unisphere For Powermax
Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control.