high8.8
CVE-2025-36588
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabil…
Impact
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Unisphere For Powermax | before 9.2.4.19 |
| Dell | Unisphere For Powermax Virtual Appliance | before 9.2.4.19 |