Dell CVEs
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-24421Dell BIOS contains an improper input validation vulnerability.
- CVE-2022-24420Dell BIOS contains an improper input validation vulnerability.
- CVE-2022-24419Dell BIOS contains an improper input validation vulnerability.
- CVE-2022-24416Dell BIOS contains an improper input validation vulnerability.
- CVE-2022-24415Dell BIOS contains an improper input validation vulnerability.
- CVE-2021-43590Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password storage vulnerability.
- CVE-2022-24409Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the a
- CVE-2022-22567Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability.
- CVE-2022-22566Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability.
- CVE-2021-36302All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability.
- CVE-2021-36348iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability.
- CVE-2021-36347iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability.
- CVE-2021-36346Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability.
- CVE-2021-36296Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability.
- CVE-2021-36295Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability.
- CVE-2021-36294Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability.
- CVE-2021-36289Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability.
- CVE-2022-22554Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability.
- CVE-2021-43589Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS) command injection V
- CVE-2021-43588Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability.
- CVE-2021-36349Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processin
- CVE-2021-36343Dell BIOS contains an improper input validation vulnerability.
- CVE-2021-36342Dell BIOS contains an improper input validation vulnerability.
- CVE-2022-22553Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploite
- CVE-2022-22552Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync.
- CVE-2022-22551DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings.
- CVE-2021-36339The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts.
- CVE-2021-36338Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability.
- CVE-2021-43587Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key.
- CVE-2021-36350Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors.