Dell CVEs
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-21531Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability.
- CVE-2021-21530Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability.
- CVE-2021-21507Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.8
- CVE-2021-21544Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability.
- CVE-2021-21543Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities.
- CVE-2021-21542Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities.
- CVE-2021-21541Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability.
- CVE-2021-21540Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability.
- CVE-2021-21539Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability.
- CVE-2021-21537Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability.
- CVE-2021-21536Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability.
- CVE-2021-21535Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability.
- CVE-2021-21534Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability.
- CVE-2021-21526Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitra
- CVE-2020-26197Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability.
- CVE-2021-21545Dell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation vulnerability that could be potentially explo
- CVE-2021-21524Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability.
- CVE-2021-21533Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in th
- CVE-2021-21532Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited
- CVE-2021-21529Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability.
- CVE-2021-21518Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2
- CVE-2021-21510Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability.
- CVE-2021-21506PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler.
- CVE-2021-21503PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command.
- CVE-2021-21514Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability.
- CVE-2021-21513Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled config
- CVE-2021-21517SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes
- CVE-2021-21515Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability.
- CVE-2021-21512Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability.
- CVE-2021-21511Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI.