CVE-2022-33934

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

Cross site scripting

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

CVE-2022-33934

Dell PowerScale OneFS (versions 8.2.x–9.4.x) contains multiple stored cross-site scripting vulnerabilities. A remote authenticated user with high privileges can store malicious HTML/JavaScript in multiple affected fields. The exploit requires user interaction and has a changed scope with potentia...

CVE-2022-33934

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

CVE-2022-33934

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

Heap overflow

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

CVE-2022-34454 affects Dell PowerScale OneFS versions 8.2.x–9.3.x with a heap-based buffer overflow in processing untrusted input, enabling a local privileged attacker to potentially take over the system. Impact is noted for compliance mode clusters. Root cause described as a boundary/heap-relate...

PT-2023-13414 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: A heap-based buffer overflow exists, which a local privileged malicious user could potentially exploit to take over the system. This issue affects compliance mode clusters...

PT-2023-13404 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.2.0.x through 9.4.0.x Description: The issue is an information vulnerability that could be exploited by a remote unauthenticated attacker to cause a data leak. Recommendations: For Dell PowerScale OneFS versio...

PT-2023-13405 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: The issue concerns a weak encoding for a password in Dell PowerScale OneFS. A malicious local privileged attacker may potentially exploit this, leading to information disclosure...

Dell PowerScale OneFS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12616)

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides horizontal scale-out NAS. versions 8.2.0 to 9.3.0 of Dell PowerScale OneFS contain a security vulnerability that could be exploited by a remote, unauthenticated attacker to cause...

Dell PowerScale OneFS 跨站脚本漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a cross-site scripting vulnerability that can be exploited by attackers to store malicious HTML or JavaScript code via multiple affected fields...

Dell PowerScale OneFS 缓冲区错误漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS suffers from a buffer overflow vulnerability that stems from a boundary error when processing untrusted input, which can be exploited ...

Dell PowerScale OneFS Denial of Service Vulnerability (CNVD-2023-12618)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a denial of service vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

Dell PowerScale OneFS Information Disclosure Vulnerability (CNVD-2023-12619)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is an information disclosure vulnerability that can be exploited by an authenticated, local attacker to obtain sensitive information stored in plaintext...