What is CVE-2025-27686?

CVE-2025-27686 is a low-severity vulnerability in Dell Unisphere For Powermax, classified under LDAP Injection. CVSS score: 2.7/10. Published 2025-04-07.

How severe is CVE-2025-27686?

Low severity. CVSS v3 base score is 2.7 out of 10.

LDAP Injection in Dell Unisphere For Powermax

CVE-2025-27686

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged…

EPSS: 0.002 (35.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L.

Affected products

Dell Unisphere For Powermax — versions N/A

Weakness classification (CWE)

CWE-90 — LDAP Injection

References

www.dell.com/support/kbdoc/en-ao/000302223/dsa-2025-111-dell-powermaxos-dell-po… (vendor-advisory)

Frequently asked questions

What is CVE-2025-27686?: CVE-2025-27686 is a low-severity vulnerability in Dell Unisphere For Powermax, classified under LDAP Injection. CVSS score: 2.7/10. Published 2025-04-07.
How severe is CVE-2025-27686?: Low severity. CVSS v3 base score is 2.7 out of 10.