Dell Powerflex

11 CVEs affecting Dell Powerflex. Latest disclosed: 2026-06-17. Critical: 0, High: 5.

Top CVEs affecting Dell Powerflex
CVESeverityScorePublishedSummary
CVE-2026-35065High8.82026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjace…
CVE-2026-32804High8.12026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access co…
CVE-2026-22283High7.52026-06-17Dell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticat…
CVE-2026-49502High7.42026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access co…
CVE-2026-35066High7.12026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentia…
CVE-2021-21588Medium6.52021-07-12Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potential…
CVE-2026-35069Medium5.72026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…
CVE-2026-35067Medium5.72026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access coul…
CVE-2026-40641Medium4.82026-06-17Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remo…
CVE-2026-35162Medium4.32026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentia…
CVE-2026-35068Low3.52026-06-17Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…