CVE-2019-18588

CVE-2019-18588 is a Cross‑Site Scripting (XSS) vulnerability in Dell EMC Unisphere for PowerMax and PowerMax OS. Authenticated attackers could inject JavaScript to affect other authenticated sessions. Affected products: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9 and prior to 9.0.2....

CVE-2022-45103

CVE-2022-45103 affects Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp 9.2.3.x. The vulnerability is an information disclosure caused by improper input validation in the download logging functionality, enabling a low-privilege remote attacker to read arbitrary file...

CVE-2021-21548

CVE-2021-21548 affects Dell EMC Unisphere for PowerMax family: PowerMax OS Release 5978, and Unisphere for PowerMax/Virtual Appliance releases prior to 9.1.0.27. The flaw is improper certificate validation in TLS, allowing an unauthenticated remote attacker to mount a man-in-the-middle attack by ...

CVE-2020-5367

CVE-2020-5367 affects Dell EMC Unisphere for PowerMax (pre-9.1.0.17), Unisphere for PowerMax Virtual Appliance (pre-9.1.0.17), and PowerMax OS Release 5978. The flaw is improper certificate validation, enabling an unauthenticated remote attacker to perform a man-in-the-middle attack by presenting...

CVE-2020-5345

CVE-2020-5345 affects Dell EMC Unisphere for PowerMax, its Virtual Appliance, and PowerMax OS Release 5978. Affected: Unisphere for PowerMax versions prior to 9.1.0.17, Unisphere for PowerMax Virtual Appliance prior to 9.1.0.17, and PowerMax OS Release 5978. Root cause: authorization bypass allow...