# Dell Unisphere for PowerMax. Every CVE that names Dell Unisphere for PowerMax among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [XML external entity injection in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2026-54470.md) `CVE-2026-54470` · CVE record: Dell Unisphere for PowerMax · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: XML external entities (XXE) - [Deserialization of untrusted data in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2026-54469.md) `CVE-2026-54469` · CVE record: Dell Unisphere for PowerMax · CVSS 8.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: Insecure deserialization - [Path traversal in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2026-54468.md) `CVE-2026-54468` · CVE record: Dell Unisphere for PowerMax · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Path traversal - [Improper authorization in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2022-34363.md) `CVE-2022-34363` · CVE record: Dell Unisphere for PowerMax and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 22 May 2026 · Tags: Broken access control - [Missing authorization in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2026-26358.md) `CVE-2026-26358` · CVE record: Dell Unisphere for PowerMax and 1 more · CVSS 8.8 High · Not analysed yet · Published 19 Feb 2026 · Tags: Broken access control - [External control of a file path in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2026-26360.md) `CVE-2026-26360` · CVE record: Dell Unisphere for PowerMax and 1 more · CVSS 8.1 High · Not analysed yet · Published 19 Feb 2026 · Tags: Path traversal - [External control of a file path in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2026-26359.md) `CVE-2026-26359` · CVE record: Dell Unisphere for PowerMax and 1 more · CVSS 8.8 High · Not analysed yet · Published 19 Feb 2026 · Tags: Path traversal - [Path traversal in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2026-26362.md) `CVE-2026-26362` · CVE record: Dell Unisphere for PowerMax and 1 more · CVSS 8.1 High · Not analysed yet · Published 19 Feb 2026 · Tags: Path traversal - [External control of a file path in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2026-26361.md) `CVE-2026-26361` · CVE record: Dell Unisphere for PowerMax and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Path traversal - [SQL injection in Dell Unisphere for PowerMax and others](https://agentprime.io/advisories/CVE-2025-36588.md) `CVE-2025-36588` · CVE record: Dell Unisphere for PowerMax and 1 more · CVSS 8.8 High · Not analysed yet · Published 22 Jan 2026 · Tags: SQL injection - [XML external entity injection in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2025-36589.md) `CVE-2025-36589` · CVE record: Dell Unisphere for PowerMax · CVSS 7.6 High · Not analysed yet · Published 6 Jan 2026 · Tags: XML external entities (XXE) - [LDAP injection in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2025-27686.md) `CVE-2025-27686` · CVE record: Dell Unisphere for PowerMax · CVSS 2.7 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Other injection - [Incorrect authorization in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2022-34397.md) `CVE-2022-34397` · CVE record: Dell Unisphere for PowerMax · CVSS 6.9 Medium · Not analysed yet · Published 13 Feb 2023 · Tags: Broken access control - [Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability.](https://agentprime.io/advisories/CVE-2022-31233.md) `CVE-2022-31233` · CVE record: Dell Unisphere for PowerMax · CVSS 6.3 Medium · Not analysed yet · Published 31 Aug 2022 · Tags: CWE-602 - [Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability.](https://agentprime.io/advisories/CVE-2021-36338.md) `CVE-2021-36338` · CVE record: Dell Unisphere for PowerMax · CVSS 6.3 Medium · Not analysed yet · Published 21 Jan 2022 · Tags: CWE-602 - [Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability.](https://agentprime.io/advisories/CVE-2021-21531.md) `CVE-2021-21531` · CVE record: Dell Unisphere for PowerMax · CVSS 8.1 High · Not analysed yet · Published 30 Apr 2021 · Tags: CWE-602 - [Cross-site scripting in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2020-35170.md) `CVE-2020-35170` · CVE record: Dell Unisphere for PowerMax · CVSS 6.3 Medium · Not analysed yet · Published 5 Jan 2021 · Tags: Cross-site scripting (XSS) - [Dell Unisphere for PowerMax: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17…](https://agentprime.io/advisories/CVE-2020-5345.md) `CVE-2020-5345` · CVE record: Dell Unisphere for PowerMax · CVSS 6.4 Medium · Not analysed yet · Published 23 Jun 2020 · Tags: CWE-602 - [Cross-site scripting in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2019-18588.md) `CVE-2019-18588` · CVE record: Dell Unisphere for PowerMax · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jan 2020 · Tags: Cross-site scripting (XSS) ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .