CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

PT-2025-15886 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue allows a high privileged attacker with local access to potentially exploit the vulnerability, leading to BIOS upgrade denial. This could be achieved by muting th...

PT-2025-15669 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue is a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this, leading to arbitrary code execution...

PT-2025-16023 · Dell · Dell Powerprotect Cyber Recovery

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Cyber Recovery versions prior to 19.18.0.2 Description: The issue concerns an Insertion of Sensitive Information Into Sent Data. A high privileged attacker with remote access could potentially exploit this, leading to...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29985

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-29985

Dell Common Event Enabler (CEE) 9.0.0.0 contains an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated, remote attacker could potentially exploit by abusing insecure default resource initialization to gain unauthorized acc...

CVE-2025-29985

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-29985

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29986

CVE-2025-29986 affects Dell’s Common Event Enabler (CEE) , specifically version 9.0.0.0 , where the vulnerability lies in the Common Anti-Virus Agent (CAVA) . The root cause is an improper restriction of the communication channel to intended endpoints , which could allow an unauthenticated attack...

Dell Common Event Enabler 安全漏洞

Dell Common Event Enabler is a framework from Dell USA. An unauthorized access vulnerability exists in Dell Common Event Enabler, which arises from the use of insecure default values when initializing resources, and can be exploited by an attacker to cause unauthorized access...

Dell Common Event Enabler 安全漏洞

Dell Common Event Enabler is a framework from Dell USA. An unauthorized access vulnerability exists in Dell Common Event Enabler. The vulnerability stems from a communication channel that does not properly restrict the target endpoint, resulting in unauthorized access. An attacker could exploit...

PT-2025-15417 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler version 9.0.0.0 Description: The issue is related to an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA of the Dell Common Event Enabler. This could allow an...

PT-2025-15418 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler version 9.0.0.0 Description: The issue is related to an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA of the Dell Common Event Enabler. This cou...

CVE-2025-27686

Dell Unisphere for PowerMax, versions prior to 10.2.0.9 and PowerMax versions prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this...

CVE-2025-27686

Dell Unisphere for PowerMax, versions prior to 10.2.0.9 and PowerMax versions prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this...

CVE-2025-27686

Dell Unisphere for PowerMax, versions prior to 10.2.0.9 and PowerMax versions prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this...