dell Vulnerability Advisory Catalog

Total 1,570 security vulnerabilities recorded for dell software and firmware.

← Back to All Vendors
Component: supportassist_for_business_pcs

SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain(s) an Incorrect Privilege Ass...

📅 2025-08-14
CVSS 2.8 Dossier →
Component: supportassist_for_business_pcs

SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with...

📅 2025-08-14
CVSS 6.7 Dossier →
Component: cloudlink

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacke...

📅 2025-08-14
CVSS 5.5 Dossier →
Component: poweredge_r7425_firmware

Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerability. A low pr...

📅 2025-08-14
CVSS 3.8 Dossier →
Component: supportassist_os_recovery

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local auth...

📅 2025-08-06
CVSS 7.8 Dossier →
Component: supportassist_os_recovery

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An u...

📅 2025-08-06
CVSS 3.5 Dossier →
Component: enterprise_sonic_os

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially explo...

📅 2025-08-04
CVSS 7.5 Dossier →
Component: elastic_cloud_storage

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attac...

📅 2025-08-04
CVSS 8.4 Dossier →
Component: avamar

Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. ...

📅 2025-08-04
CVSS 8.3 Dossier →
Component: digital_delivery

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker co...

📅 2025-08-04
CVSS 7.2 Dossier →
CVE-2025-36594 CRITICAL
Component: data_domain_operating_system

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions...

📅 2025-08-04
CVSS 9.8 Dossier →
Component: data_domain_operating_system

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions...

📅 2025-08-04
CVSS 7.8 Dossier →
Component: data_domain_operating_system

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions...

📅 2025-08-04
CVSS 6.7 Dossier →
Component: data_domain_operating_system

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions...

📅 2025-08-04
CVSS 6.7 Dossier →
Component: data_domain_operating_system

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions...

📅 2025-08-04
CVSS 6.7 Dossier →
Component: unity_operating_environment

Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nas utility. An authenticated attacker could potenti...

📅 2025-08-04
CVSS 7.8 Dossier →
Component: unity_operating_environment

Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nfssupport utility. An authenticated attacker could ...

📅 2025-08-04
CVSS 7.8 Dossier →
Component: unity_operating_environment

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability...

📅 2025-08-04
CVSS 6.1 Dossier →
Component: unity_operating_environment

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera...

📅 2025-08-04
CVSS 7.3 Dossier →
Component: smartfabric_os10

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local ...

📅 2025-07-30
CVSS 2.5 Dossier →
Component: smartfabric_os10

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains an Improper Restriction of XML External Entity Reference vulnerability. A low pri...

📅 2025-07-30
CVSS 6.5 Dossier →
Component: smartfabric_os10

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories Accessible to External Parties vulnerability. A low privile...

📅 2025-07-30
CVSS 5.5 Dossier →
Component: powerprotect_data_manager

Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerProtect Data Manager. A low pri...

📅 2025-07-30
CVSS 6.5 Dossier →
Component: techadvisor

Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local ...

📅 2025-07-30
CVSS 8.8 Dossier →
Page 12 of 66 (1,570 Total Records)