Browse CVEs

HIGH 7.8 CVE-2021-21503 PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this … Emc Powerscale Onefs Mitigation only Fix from $1,9502021-03-08 CRITICAL 9.8 CVE-2021-21513EPSS 6% Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration c… Openmanage Server Administrator 9.4.0.3 / 9.5.0.1+ Fix from $2,3002021-03-02 HIGH 7.2 CVE-2021-21517 SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supp… Emc Srs Policy Manager Mitigation only Fix from $1,9502021-03-01 MEDIUM 5.4 CVE-2021-21515 Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially… Emc Sourceone 7.2+ Fix from $1,6002021-03-01 MEDIUM 6.0 CVE-2021-21512 Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyb… Emc Powerprotect Cyber Recovery Mitigation only Fix from $1,6002021-02-19 HIGH 8.1 CVE-2021-21511 Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could … Emc Avamar Server Mitigation only Fix from $1,9502021-02-15 CRITICAL 9.8 CVE-2021-21502 Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRI… Emc Powerscale Onefs Mitigation only Fix from $2,3002021-02-09 HIGH 7.8 CVE-2020-26191 Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_ENGINE may use the Permission… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-02-09 HIGH 7.8 CVE-2020-26192 Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-02-09 HIGH 7.8 CVE-2020-26193 Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISI_PRIV_CLUSTER privilege may e… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-02-09 HIGH 7.8 CVE-2020-26194 Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource vulnerability. This may allow a… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-02-09 MEDIUM 5.5 CVE-2020-26196 Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentia… Emc Powerscale Onefs Mitigation only Fix from $1,6002021-02-09 MEDIUM 5.3 CVE-2020-26195 Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a … Emc Powerscale Onefs Mitigation only Fix from $1,6002021-02-09 CRITICAL 10.0 CVE-2020-29495EPSS 6% DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attack… Emc Avamar Server Patch available Fix from $2,3002021-01-14 CRITICAL 9.8 CVE-2020-29493 DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could… Emc Avamar Server Patch available Fix from $2,3002021-01-14 HIGH 8.7 CVE-2020-29494 Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulner… Emc Avamar Server Patch available Fix from $1,9502021-01-14 MEDIUM 6.8 CVE-2020-26186 Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system m… Inspiron 5675 Firmware 1.4.1+ Fix from $1,6002021-01-08 MEDIUM 6.7 CVE-2020-29500 Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T environments. A locally authe… Emc Powerstore Firmware 1.0.3.0.5.007+ Fix from $1,6002021-01-05 MEDIUM 6.7 CVE-2020-29501 Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally a… Emc Powerstore Firmware 1.0.3.0.5.007+ Fix from $1,6002021-01-05 MEDIUM 6.7 CVE-2020-29502 Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally a… Emc Powerstore Firmware 1.0.3.0.5.007+ Fix from $1,6002021-01-05 MEDIUM 5.4 CVE-2020-35170 Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.… Unisphere 9.1.0.24 / 9.2.0.6+ Fix from $1,6002021-01-05 HIGH 7.8 CVE-2020-26181 Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock … Emc Isilon Onefs after 8.1.0.0 Fix from $1,9502021-01-05 MEDIUM 6.7 CVE-2020-26199 Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability. A user credentials (inclu… Emc Unity Operating Environment 5.0.4.0.5.012+ Fix from $1,6002021-01-05 MEDIUM 6.7 CVE-2020-29489 Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerability. A user credentials (incl… Emc Unity Operating Environment 5.0.4.0.5.012+ Fix from $1,6002021-01-05 MEDIUM 6.5 CVE-2020-29490 Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A r… Emc Unity Operating Environment 5.0.4.0.5.012+ Fix from $1,6002021-01-05 CRITICAL 10.0 CVE-2020-29492 Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially … Wyse Thinos after 8.6 Fix from $2,3002021-01-04 HIGH 8.6 CVE-2020-29491 Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially … Wyse Thinos after 8.6 Fix from $1,9502021-01-04 HIGH 7.6 CVE-2020-5361 Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who for… Cpg Bios Mitigation only Fix from $1,9502021-01-04 MEDIUM 6.1 CVE-2020-29498 Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit … Wyse Management Suite 3.1+ Fix from $1,6002021-01-04 MEDIUM 5.4 CVE-2020-29497 Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low … Wyse Management Suite 3.1+ Fix from $1,6002021-01-04