Dell Unisphere For Powermax — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Unisphere For Powermax, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2025-36588 — CVSS 8.8 (high): Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL…
• CVE-2026-26359 — CVSS 8.8 (high): Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker…
• CVE-2026-26358 — CVSS 8.8 (high): Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote…
• CVE-2021-21531 — CVSS 8.1 (high): Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user…
• CVE-2026-26360 — CVSS 8.1 (high): Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker…
• CVE-2026-26362 — CVSS 8.1 (high): Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote…
• CVE-2021-36339 — CVSS 7.8 (high): The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this…
• CVE-2025-36589 — CVSS 7.6 (high): Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low…
• CVE-2026-26361 — CVSS 6.5 (medium): Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker…
• CVE-2021-36338 — CVSS 6.3 (medium): Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could…
• CVE-2022-31233 — CVSS 6.3 (medium): Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially…
• CVE-2025-27686 — CVSS 2.7 (low): Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper…