Dell Unisphere 360 vulnerabilities

5 vulnerabilities

Known vulnerabilities in Dell Unisphere 360, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8CVE-2021-36338dellpowermax_os+6
EPSS score
0.36%
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.7.8CVE-2021-36339dellpowermax_os+7
EPSS score
0.24%
The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.8CVE-2022-31233dellevasa_provider_virtual_appliance+7
EPSS score
0.33%
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.6.5CVE-2022-45103dellemc_solutions_enabler_virtual_appliance+8
EPSS score
0.74%
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.7.5CVE-2022-34363dellunisphere_360+2
EPSS score
0.25%
Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the  Unisphere for VMAX application running in vApp