291 matches found
CVE-2022-29084
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account...
Design/Logic Flaw
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account...
CVE-2022-29084
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account...
CVE-2022-29091
Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI. An Unauthenticated Remote Attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a...
CVE-2022-29091
Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI. An Unauthenticated Remote Attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a...
CVE-2022-29091
Summary: CVE-2022-29091 affects Dell Unity, Dell UnityVSA, and Dell UnityXT versions before 5.2.0.0.5.173. A Reflected Cross-Site Scripting vulnerability exists in the Unisphere GUI, enabling an unauthenticated remote attacker to trigger execution of malicious HTML/JavaScript in the victim’s brow...
CVE-2022-29091
Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI. An Unauthenticated Remote Attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a...
CVE-2022-29084
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account...
CVE-2021-36338
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in...
CVE-2021-36338
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in...
Privilege escalation
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in...
CVE-2021-36338
Dell EMC Unisphere for PowerMax is affected by a privilege-escalation vulnerability in versions prior to 9.2.3.15 (and earlier fixed partialy by CVE-2022-31233 for the 9.2.2.x line). An adjacent malicious user could potentially escalate privileges and access restricted functionalities. Remediatio...
CVE-2021-36338
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in...
PT-2022-10505 · Dell · Unisphere For Powermax
Name of the Vulnerable Software and Affected Versions: Unisphere for PowerMax versions prior to 9.2.2.2 Description: The issue allows an adjacent malicious user to potentially exploit a privilege escalation vulnerability, enabling them to access functionalities they do not have access to...
Dell EMC Unisphere for PowerMax has an unspecified vulnerability (CNVD-2022-06903)
DELL Dell EMC Unisphere for PowerMax is a graphical management tool for PowerMax storage arrays from Dell DELL U.S.A. A security vulnerability exists in Dell EMC Unisphere for PowerMax, which stems from the lack of effective restrictions and filtering of user privileges in the software. An attack...
Dell EMC Unisphere for PowerMax has an unspecified vulnerability (CNVD-2022-06904)
DELL Dell EMC Unisphere for PowerMax is a set of graphical management tools for PowerMax storage arrays from Dell DELL U.S.A. Dell EMC Unisphere for PowerMax has a security vulnerability that could be exploited by attackers to increase privileges...
Dell EMC Unisphere for PowerMax 安全漏洞
DELL Dell EMC Unisphere for PowerMax is a set of graphical management tools for PowerMax storage arrays from Dell DELL U.S.A. Dell EMC Unisphere for PowerMax has a security vulnerability that could be exploited by attackers to increase privileges...
Dell EMC Unisphere for PowerMax 安全漏洞
DELL Dell EMC Unisphere for PowerMax is a graphical management tool for PowerMax storage arrays from Dell DELL U.S.A. A security vulnerability exists in Dell EMC Unisphere for PowerMax, which stems from the lack of effective restrictions and filtering of user privileges in the software. An attack...
Dell EMC Unisphere for PowerMax信任管理问题漏洞
Dell EMC Unisphere for PowerMax is a suite of graphical management tools for PowerMax storage arrays from Dell USA. A security vulnerability exists in Dell EMC Unisphere that stems from improper certificate validation. An unauthenticated, remote attacker could use this vulnerability to perform a...
CVE-2021-21531
Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions...