Dell Elastic Cloud Storage vulnerabilities

22 CVEs affecting Dell Elastic Cloud Storage, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31231, published 2026-05-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8021, published 2017-10-03. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system.
CVE-2024-22459, published 2024-02-28. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could…
CVE-2026-35157, published 2026-05-11. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An…
CVE-2025-26477, published 2025-04-17. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code…
CVE-2024-51540, published 2024-12-26. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the…
CVE-2026-22273, published 2026-01-23. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote…
CVE-2022-31231, published 2026-05-22. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability,…
CVE-2024-30473, published 2024-07-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to…
CVE-2024-38485, published 2024-12-09. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads…
CVE-2024-52534, published 2024-12-25. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this…

Latest

CVE-2026-40636, published 2026-05-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could…
CVE-2026-26946, published 2026-05-11. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local…
CVE-2025-43992, published 2026-05-11. Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days. Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An…
CVE-2026-28261, published 2026-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into Log File vulnerability.…
CVE-2026-22276, published 2026-01-23. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local…
CVE-2026-22275, published 2026-01-23. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information in Source Code vulnerability. A low privileged attacker with…
CVE-2026-22274, published 2026-01-23. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An…