CVE-2024-28976

Dell Repository Manager is affected by a Path Traversal vulnerability in the API module, impacting versions prior to 3.4.5. The root cause is path traversal that could allow a local attacker with low privileges to gain unauthorized write access to files on the server filesystem with the web appli...

CVE-2024-28977

Dell Repository Manager (versions 3.4.2–3.4.4) is affected by a Path Traversal vulnerability in the logger module. The root cause is insufficient input validation in the logger, enabling a local attacker with low privileges to read files on the server filesystem under the web application's privil...

CVE-2023-22576

Dell Repository Manager (versions 3.4.2 and earlier) is affected by a Local Privilege Escalation in the Installation module, allowing a local low-privilege user to execute arbitrary code with high privileges and potentially disrupt service. Remediation is available: patch to 3.4.3 via Dell securi...

CVE-2023-44282

Dell Repository Manager (3.4.3 and earlier) contains an Improper Access Control vulnerability in the installation module that could allow a local, low-privilege attacker to escalate privileges. This is supported by multiple sources in the connected documents. Public remediation details are not co...

CVE-2023-44292

Dell Repository Manager (Dell RM) 3.4.3 and earlier have an improper access control vulnerability in the installation module that could allow a local, low-privilege attacker to escalate privileges. Reported across multiple sources, the vulnerability impact is privilege escalation; no exploit stat...

CVE-2025-45376

Dell Repository Manager (DRM) versions 3.4.7–3.4.8 are affected by an Improper Handling of Insufficient Permissions that could allow a local, low-privilege attacker to elevate privileges. The underlying issue is privilege handling rather than remote access, and exploitation is described as local ...

CVE-2026-21420

Dell Repository Manager (DRM) v3.4.7 and earlier is affected by an Uncontrolled Search Path Element, enabling a local, low-privilege attacker to potentially execute arbitrary code and escalate privileges. Root cause is improper handling of search paths in DRM prior to 3.4.8. Impact includes high ...