Dell Unisphere For Powermax Virtual Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Unisphere For Powermax Virtual Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2025-36588 — CVSS 8.8 (high): Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL…
• CVE-2022-45104 — CVSS 8.8 (high): Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability…
• CVE-2021-21531 — CVSS 8.1 (high): Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user…
• CVE-2021-36339 — CVSS 7.8 (high): The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this…
• CVE-2025-36589 — CVSS 7.6 (high): Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low…
• CVE-2023-48671 — CVSS 7.5 (high): Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could potentially exploit…
• CVE-2023-48660 — CVSS 7.5 (high): Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this…
• CVE-2025-36595 — CVSS 7.2 (high): Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static…
• CVE-2023-48663 — CVSS 7.2 (high): Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could…
• CVE-2023-48664 — CVSS 7.2 (high): Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could…
• CVE-2023-48665 — CVSS 7.2 (high): Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could…
• CVE-2024-25946 — CVSS 7.2 (high): Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit…
• CVE-2024-25955 — CVSS 7.2 (high): Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit…
• CVE-2023-48662 — CVSS 7.2 (high): Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could…
• CVE-2022-34397 — CVSS 6.9 (medium): Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass…
• CVE-2022-34363 — CVSS 6.5 (medium): Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX…
• CVE-2022-31233 — CVSS 6.3 (medium): Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially…
• CVE-2021-36338 — CVSS 6.3 (medium): Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could…
• CVE-2023-48661 — CVSS 4.9 (medium): Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges…