Dell Solutions Enabler vulnerabilities

5 vulnerabilities

Known vulnerabilities in Dell Solutions Enabler, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2021-21531dellpowermax_os+4
EPSS score
0.69%
Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions.
8CVE-2021-36338dellpowermax_os+6
EPSS score
0.36%
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
7.8CVE-2021-36339dellpowermax_os+7
EPSS score
0.24%
The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.
8CVE-2022-31233dellevasa_provider_virtual_appliance+7
EPSS score
0.33%
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.
6.5CVE-2022-45103dellemc_solutions_enabler_virtual_appliance+8
EPSS score
0.74%
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.