CVE-2024-25946

CVE-2024-25946 affects Dell vApp Manager prior to 9.2.4.9. The vulnerability is a OS command injection in Dell vApp Manager, allowing an authorized attacker to execute arbitrary commands on the host. Exploitation details are not provided in the connected documents beyond the command-injection imp...

CVE-2021-21531

Dell Unisphere for PowerMax (

CVE-2022-31233

CVE-2022-31233 affects Dell EMC Unisphere for PowerMax prior to version 9.2.3.15, with a privilege-escalation issue that could allow an adjacent user to gain elevated access to restricted functionality. Connected sources indicate a related historical context to CVE-2021-36338 (partial fix) and po...

CVE-2021-36338

Dell EMC Unisphere for PowerMax is affected by a privilege-escalation vulnerability in versions prior to 9.2.3.15 (and earlier fixed partialy by CVE-2022-31233 for the 9.2.2.x line). An adjacent malicious user could potentially escalate privileges and access restricted functionalities. Remediatio...

CVE-2022-34397

Dell CVE-2022-34397 affects Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp up to version 10.0.0.5, with an authorization bypass vulnerability that allows actions by users not authorized. Connected documents confirm affected product/versions and the underlying caus...

CVE-2023-48661

Dell vApp Manager prior to 9.2.4.x is affected by an arbitrary file read vulnerability. A remote attacker with high privileges could read arbitrary files from the target system. The issue is documented across multiple sources (NVD entry CVE-2023-48661 and related CNVD/PT advisories) and is trigge...

CVE-2024-25955

Dell vApp Manager (Dell) is affected by CVE-2024-25955. Versions prior to 9.2.4.9 contain a OS command injection vulnerability that could allow an authorized attacker to execute arbitrary commands on the system. Root cause is improper handling of commands in the vApp Manager OS interaction, leadi...

CVE-2023-48671

Dell vApp Manager is affected by an information disclosure vulnerability in versions prior to 9.2.4.x. The issue allows a remote attacker to obtain sensitive information that could aid in further attacks. The confirmed workaround/mitigation is to upgrade to version 9.2.4.x or later. Exploitation ...

CVE-2021-36339

The CVE-2021-36339 issue affects Dell EMC Virtual Appliances prior to version 9.2.2.2, where undocumented user accounts exist. This enables a local attacker with access to the appliance to potentially obtain privileged access. The vulnerability is rooted in the presence of hidden accounts rather ...

CVE-2023-48664

CVE-2023-48664 affects Dell vApp Manager. The vulnerability exists in Dell Virtual Appliance Manager prior to version 9.2.4.x and enables a remote attacker with high privileges to execute arbitrary OS commands on the affected system via a command-injection flaw. Documented impact is arbitrary com...

CVE-2022-45104

CVE-2022-45104 affects Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp 9.2.3.x. The vulnerability enables a low-privileged, remote attacker to execute arbitrary commands on the underlying system via a command execution flaw. CVSS 3.1 metrics indicate network attack...

CVE-2023-48662

CVE-2023-48662 describes a command injection vulnerability in Dell Virtual Appliance Manager (Dell vApp Manager). Affected are Dell vApp Manager versions prior to 9.2.4.x. A remote attacker with high privileges could potentially execute arbitrary operating system commands on the affected system. ...

CVE-2023-48665

Dell vApp Manager, versions prior to 9.2.4.x, contains a command injection vulnerability. A remote attacker with high privileges could exploit this over the network to execute arbitrary OS commands on the affected system, impacting confidentiality, integrity, and availability. Supported details d...

CVE-2023-48660

Dell Virtual Appliance Manager (Dell vApp Manger) is affected by CVE-2023-48660. The vulnerability exists in versions prior to 9.2.4.x and allows a remote attacker to read arbitrary files from the target system, impacting confidentiality. The CVSS from NVD/EU sources indicates network access, low...

CVE-2023-48663

Dell vApp Manager (Dell Virtual Appliance Manager) is affected. Versions prior to 9.2.4.x contain a command-injection vulnerability that could allow a remote, high-privilege attacker to execute arbitrary OS commands on the affected system. Exploitation details are not provided in the connected do...

CVE-2025-36595

Dell Unisphere for PowerMax vApp 9.2.4.x is affected by a Static Code Injection vulnerability (CVE-2025-36595). A high-privileged attacker with remote access could potentially achieve code execution via the vulnerability. The documented attack surface indicates network access is required with low...