CVE-2021-21588: Dell Powerflex Presentation Server

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Affected products

• Dell Powerflex Presentation Server: from 3.5, before 3.6 (fixed in 3.6)

Published 2021-07-12. Last modified 2026-06-17.