Cross site scripting

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

CVE-2022-33934

Dell PowerScale OneFS (versions 8.2.x–9.4.x) contains multiple stored cross-site scripting vulnerabilities. A remote authenticated user with high privileges can store malicious HTML/JavaScript in multiple affected fields. The exploit requires user interaction and has a changed scope with potentia...

CVE-2022-33934

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

CVE-2022-34454 affects Dell PowerScale OneFS versions 8.2.x–9.3.x with a heap-based buffer overflow in processing untrusted input, enabling a local privileged attacker to potentially take over the system. Impact is noted for compliance mode clusters. Root cause described as a boundary/heap-relate...

CVE-2022-34445: Weak Encoding for Password

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure...

CVE-2022-34444: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

PT-2023-13404 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.2.0.x through 9.4.0.x Description: The issue is an information vulnerability that could be exploited by a remote unauthenticated attacker to cause a data leak. Recommendations: For Dell PowerScale OneFS versio...

PT-2023-13414 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: A heap-based buffer overflow exists, which a local privileged malicious user could potentially exploit to take over the system. This issue affects compliance mode clusters...

Dell PowerScale OneFS 缓冲区错误漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS suffers from a buffer overflow vulnerability that stems from a boundary error when processing untrusted input, which can be exploited ...

CVE-2022-33934: Improper Neutralization of Input During Web Page Generation

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12616)

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides horizontal scale-out NAS. versions 8.2.0 to 9.3.0 of Dell PowerScale OneFS contain a security vulnerability that could be exploited by a remote, unauthenticated attacker to cause...

CVE-2022-34454: Heap-based Buffer Overflow

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

Dell PowerScale OneFS Denial of Service Vulnerability (CNVD-2023-12618)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a denial of service vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12621)

Dell PowerScale OneFS is a U.S. based Dell Dell company that provides the PowerScale OneFS operating system for scale-out NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by remote, unauthenticated attackers to cause information disclosure and remote execution...

Dell PowerScale OneFS Trust Management Issue Vulnerability

Dell PowerScale OneFS is a U.S. Dell Dell PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS is vulnerable to a trust management issue, which could be exploited by an unauthenticated attacker to cause a complete system crash...

Dell PowerScale OneFS Log Information Disclosure Vulnerability (CNVD-2023-12625)

Dell PowerScale OneFS is a U.S. Dell Dell PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS is vulnerable to a log information disclosure vulnerability that could be exploited by a low-privilege local attacker to cause sensitive information to be compromised...

CVE-2023-22574

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and...

CVE-2023-22574

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and...

CVE-2023-22573

Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure...