Advisories · Technology

Dell PowerScale OneFS.

Every CVE that names Dell PowerScale OneFS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-25954 CVE record

CVSS 5.3 Medium

Insufficient session expiration in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Authentication bypass
Not analysed yet 28 Mar 2024
CVE-2024-25963 CVE record

CVSS 5.9 Medium

Broken or risky cryptographic algorithm in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Weak cryptography or TLS
Not analysed yet 28 Mar 2024
CVE-2024-25953 CVE record

CVSS 6.0 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link…
- Dell PowerScale OneFS
- CWE-61
Not analysed yet 28 Mar 2024
CVE-2024-25952 CVE record

CVSS 6.0 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link…
- Dell PowerScale OneFS
- CWE-61
Not analysed yet 28 Mar 2024
CVE-2024-25960 CVE record

CVSS 7.3 High

Cleartext transmission of sensitive information in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Weak cryptography or TLS
Not analysed yet 28 Mar 2024
CVE-2024-25961 CVE record

CVSS 6.0 Medium

Improper privilege management in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Privilege escalation
Not analysed yet 28 Mar 2024
CVE-2024-25959 CVE record

CVSS 7.9 High

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 28 Mar 2024
CVE-2024-25964 CVE record

CVSS 5.3 Medium

Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.
- Dell PowerScale OneFS
- CWE-385
Not analysed yet 25 Mar 2024
CVE-2024-24901 CVE record

CVSS 3.0 Low

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability.
- Dell PowerScale OneFS
- CWE-778
Not analysed yet 4 Mar 2024
CVE-2024-22463 CVE record

CVSS 7.4 High

Broken or risky cryptographic algorithm in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Weak cryptography or TLS
Not analysed yet 4 Mar 2024
CVE-2024-22430 CVE record

CVSS 5.5 Medium

Incorrect default permissions in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Broken access control
Not analysed yet 1 Feb 2024
CVE-2024-22449 CVE record

CVSS 6.6 Medium

Missing authentication in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Authentication bypass
Not analysed yet 1 Feb 2024
CVE-2023-44295 CVE record

CVSS 6.3 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a…
- Dell PowerScale OneFS
- CWE-664
Not analysed yet 5 Dec 2023
CVE-2023-44288 CVE record

CVSS 7.5 High

Dell PowerScale OneFS: Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x…
- Dell PowerScale OneFS
- CWE-664
Not analysed yet 5 Dec 2023
CVE-2023-43076 CVE record

CVSS 6.5 Medium

Memory leak in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Denial of service
Not analysed yet 2 Nov 2023
CVE-2023-43087 CVE record

CVSS 4.3 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of…
- Dell PowerScale OneFS
- CWE-280
Not analysed yet 2 Nov 2023
CVE-2023-32457 CVE record

CVSS 7.5 High

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x…
- Dell PowerScale OneFS
- Privilege escalation
Not analysed yet 29 Aug 2023
CVE-2023-32493 CVE record

CVSS 7.3 High

Protection mechanism failure in Dell PowerScale OneFS
- Dell PowerScale OneFS
- CWE-693
Not analysed yet 16 Aug 2023
CVE-2023-32492 CVE record

CVSS 5.3 Medium

Incorrect default permissions in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Broken access control
Not analysed yet 16 Aug 2023
CVE-2023-32491 CVE record

CVSS 6.3 Medium

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 16 Aug 2023
CVE-2023-32490 CVE record

CVSS 6.7 Medium

Improper privilege management in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Privilege escalation
Not analysed yet 16 Aug 2023
CVE-2023-32489 CVE record

CVSS 6.7 Medium

Dell PowerScale OneFS 8.2x -9.5x contains a privilege escalation vulnerability.
- Dell PowerScale OneFS
- CWE-280
Not analysed yet 16 Aug 2023
CVE-2023-32488 CVE record

CVSS 5.3 Medium

Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS.
- Dell PowerScale OneFS
- CWE-1230
Not analysed yet 16 Aug 2023
CVE-2023-32487 CVE record

CVSS 7.8 High

Improper privilege management in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Privilege escalation
Not analysed yet 16 Aug 2023
CVE-2023-32486 CVE record

CVSS 6.7 Medium

Execution with unnecessary privileges in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Privilege escalation
Not analysed yet 16 Aug 2023
CVE-2023-32495 CVE record

CVSS 7.8 High

Information disclosure in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 16 Aug 2023
CVE-2023-32494 CVE record

CVSS 6.7 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient…
- Dell PowerScale OneFS
- CWE-274
Not analysed yet 16 Aug 2023
CVE-2023-25942 CVE record

CVSS 6.5 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption…
- Dell PowerScale OneFS
- CWE-664
Not analysed yet 4 Apr 2023
CVE-2023-25941 CVE record

CVSS 7.8 High

Incorrect default permissions in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Broken access control
Not analysed yet 4 Apr 2023
CVE-2023-25940 CVE record

CVSS 6.7 Medium

Symlink following in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Path traversal
Not analysed yet 4 Apr 2023
CVE-2023-25536 CVE record

CVSS 6.7 Medium

Information disclosure in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 2 Mar 2023
CVE-2023-23689 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Denial of service
Not analysed yet 28 Feb 2023
CVE-2023-25540 CVE record

CVSS 6.0 Medium

Incorrect default permissions in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Broken access control
Not analysed yet 28 Feb 2023
CVE-2022-34445 CVE record

CVSS 6.0 Medium

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password.
- Dell PowerScale OneFS
- CWE-261
Not analysed yet 10 Feb 2023
CVE-2022-34444 CVE record

CVSS 5.9 Medium

Broken or risky cryptographic algorithm in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Weak cryptography or TLS
Not analysed yet 10 Feb 2023
CVE-2022-33934 CVE record

CVSS 7.7 High

Cross-site scripting in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Cross-site scripting (XSS)
Not analysed yet 10 Feb 2023
CVE-2022-34454 CVE record

CVSS 6.7 Medium

Heap-based buffer overflow in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Memory corruption
Not analysed yet 10 Feb 2023
CVE-2023-22575 CVE record

CVSS 8.7 High

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 1 Feb 2023
CVE-2023-22573 CVE record

CVSS 7.9 High

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 1 Feb 2023
CVE-2023-22574 CVE record

CVSS 8.1 High

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 1 Feb 2023
CVE-2023-22572 CVE record

CVSS 7.8 High

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 1 Feb 2023
CVE-2022-46679 CVE record

CVSS 6.5 Medium

Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability.
- Dell PowerScale OneFS
- CWE-410
Not analysed yet 1 Feb 2023
CVE-2022-45100 CVE record

CVSS 8.1 High

Improper certificate validation in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Weak cryptography or TLS
Not analysed yet 1 Feb 2023
CVE-2022-45099 CVE record

CVSS 7.8 High

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password.
- Dell PowerScale OneFS
- CWE-261
Not analysed yet 1 Feb 2023
CVE-2022-45098 CVE record

CVSS 6.1 Medium

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 1 Feb 2023
CVE-2022-45096 CVE record

CVSS 5.4 Medium

Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue.
- Dell PowerScale OneFS
- CWE-355
Not analysed yet 1 Feb 2023
CVE-2022-45097 CVE record

CVSS 6.3 Medium

Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability.
- Dell PowerScale OneFS
- CWE-842
Not analysed yet 1 Feb 2023
CVE-2022-45095 CVE record

CVSS 6.7 Medium

Command injection in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Command injection
Not analysed yet 1 Feb 2023
CVE-2022-45101 CVE record

CVSS 7.3 High

Dell PowerScale OneFS: Dell PowerScale OneFS 9.0.0.x - 9.4.0.x…
- Dell PowerScale OneFS
- CWE-274
Not analysed yet 1 Feb 2023
CVE-2022-34439 CVE record

CVSS 5.3 Medium

Resource allocation without limits in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Denial of service
Not analysed yet 21 Oct 2022
CVE-2022-34438 CVE record

CVSS 6.7 Medium

Improper privilege management in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Privilege escalation
Not analysed yet 21 Oct 2022
CVE-2022-34437 CVE record

CVSS 6.7 Medium

OS command injection in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Command injection
Not analysed yet 21 Oct 2022
CVE-2022-31239 CVE record

CVSS 6.7 Medium

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 21 Oct 2022
CVE-2022-34378 CVE record

CVSS 5.5 Medium

Path traversal in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Path traversal
Not analysed yet 2 Sept 2022
CVE-2022-34371 CVE record

CVSS 8.1 High

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6…
- Dell PowerScale OneFS
Not analysed yet 2 Sept 2022
CVE-2022-34369 CVE record

CVSS 8.1 High

Sensitive information in log files in Dell PowerScale OneFS
- Dell PowerScale OneFS
- Information disclosure
Not analysed yet 2 Sept 2022
CVE-2022-33932 CVE record

CVSS 5.3 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6…
- Dell PowerScale OneFS
- CWE-419
Not analysed yet 22 Aug 2022
CVE-2022-32480 CVE record

CVSS 4.3 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6…
- Dell PowerScale OneFS
- CWE-1188
Not analysed yet 22 Aug 2022
CVE-2022-31238 CVE record

CVSS 4.7 Medium

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6…
- Dell PowerScale OneFS
Not analysed yet 22 Aug 2022
CVE-2022-31237 CVE record

CVSS 3.3 Low

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an…
- Dell PowerScale OneFS
- CWE-281
Not analysed yet 22 Aug 2022