Vulnerabilidades do Dell Powerflex Rack

CVE-2025-32748 Média · 6.1 CWE-601 17/06/2026

Open Redirect em Dell Powerflex Rack Release Certification Matrix

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to trigger redirections.

CVE-2025-46371 Média · 5.5 CWE-327 22/05/2026

Use of a Broken or Risky Cryptographic Algorithm em Dell Powerflex Appliance Intelligent Catalog

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2025-32751 Média · 5.5 CWE-922 22/05/2026

Insecure Storage of Sensitive Information em Dell Powerflex Appliance Intelligent Catalog

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.

CVE-2025-32749 Alta · 7.5 CWE-276 22/05/2026

Incorrect Default Permissions em Dell Powerflex Appliance Intelligent Catalog

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2025-32747 Alta · 7.8 CWE-266 22/05/2026

Dell PowerFlex Manager, version(s)

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2025-32746 Média · 5.5 CWE-922 22/05/2026

Insecure Storage of Sensitive Information em Dell Powerflex Appliance Intelligent Catalog

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.

CVE-2025-32745 Média · 6.5 CWE-295 22/05/2026

Improper Certificate Validation em Dell Powerflex Appliance Intelligent Catalog

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2025-26483 Alta · 8.2 CWE-601 22/05/2026

Open Redirect em Dell Powerflex Appliance Intelligent Catalog

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

CVE-2025-32750 Alta · 7.5 CWE-548 20/05/2026

Dell PowerFlex Manager, version(s)

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.