PT-2025-31426 · Dell · Dell Smartfabric Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions prior to 10.6.0.5 Description: Dell SmartFabric OS10 Software is susceptible to an Improper Restriction of XML External Entity Reference issue. A low privileged attacker with remote access could...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-30483

CVE-2025-30483 affects Dell ECS prior to 3.8.1.5 and Dell ObjectScale prior to 4.0.0.0, where an insertion of sensitive information into log files may allow a low-privilege, local attacker to disclose information. The NVD-derived CVSSv3.1 base score is 5.5 (Medium) with LOCAL, LOW complexity, and...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2025-29560 · Dell · Dell Ecs +1

Name of the Vulnerable Software and Affected Versions: Dell ECS versions prior to 3.8.1.5 ObjectScale version 4.0.0.0 Description: Dell ECS versions prior to 3.8.1.5 and ObjectScale version 4.0.0.0 contain a flaw that allows the insertion of sensitive information into log files. A low-privileged...

Dell iDRAC Access Control Error Vulnerability

Dell iDRAC is an embedded remote management controller in Dell servers that provides hardware monitoring, remote control, and troubleshooting, and runs independently of the operating system. An Access Control Error vulnerability exists in Dell iDRAC that stems from improper access control and can...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

CVE-2025-36600

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (DELL Unity Operating Environment) storage system lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Dell Unity Operating Environment’s operating system for storing and managing data involves the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a malicious actor to increase their...

The vulnerability of the software for remote IT support and monitoring of Dell Secure Connect Gateway (SCG) arises from the lack of protective measures for the SQL query structure. This allows attackers to disclose sensitive information that should be protected.

The vulnerability of software for remote IT support and monitoring of Dell Secure Connect Gateway SCG is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to disclose sensitive information...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

CVE-2025-36599

Summary: Dell PowerFlex Manager VM (Dell PowerFlex Manager VM) versions before 4.6.2.1 are affected by an insertion of sensitive information into log files. A low-privileged, remote attacker could exploit this to disclose user credentials and potentially access the system with the compromised acc...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

Dell PowerFlex Manager VM 日志信息泄露漏洞

Dell PowerFlex Manager VM is a virtual machine software from Dell for managing and monitoring storage systems. A log information disclosure vulnerability exists in Dell PowerFlex Manager VM versions prior to 4.6.2.1. An attacker could exploit this vulnerability to obtain user credentials and then...

PT-2025-28957 · Dell · Dell Powerflex Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager VM versions prior to 4.6.2.1 Description: Dell PowerFlex Manager VM is affected by an issue allowing the insertion of sensitive information into log files. A low-privileged attacker with remote access could exploit this...

CVE-2025-36600

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...