Dell Common Event Enabler vulnerabilities

4 CVEs affecting Dell Common Event Enabler, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-29986, published 2025-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-28964, published 2024-06-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability,…
CVE-2025-29986, published 2025-04-08. High severity, CVSS 8.3. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent (CAVA). An…
CVE-2025-29985, published 2025-04-08. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker…
CVE-2023-32477, published 2023-09-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain…