Dell vulnerabilities
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-23374Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information
- CVE-2025-22394Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
- CVE-2025-21101Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability.
- CVE-2025-21111Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability.
- CVE-2025-21102Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability.
- CVE-2024-47239Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability.
- CVE-2025-22395Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability.
- CVE-2024-47475Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability.
- CVE-2024-51540Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS.
- CVE-2024-52534Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability.
- CVE-2024-52543Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability.
- CVE-2024-53291Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability.
- CVE-2024-47978Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability.
- CVE-2024-52535Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symboli
- CVE-2024-51532Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.
- CVE-2024-47480Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability.
- CVE-2024-52542Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability.
- CVE-2024-28980Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH.
- CVE-2024-47984Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.
- CVE-2024-24902Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability.
- CVE-2024-38488Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability.
- CVE-2024-48007Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability.
- CVE-2024-48008Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability.
- CVE-2024-22461Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability.
- CVE-2024-47238Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.
- CVE-2024-53292Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper.
- CVE-2024-53289Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
- CVE-2024-53290Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
- CVE-2024-52537Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability.
- CVE-2024-47977Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization