Dell Evasa Provider Virtual Appliance vulnerabilities

3 CVEs affecting Dell Evasa Provider Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-34397, published 2023-02-13.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-45104, published 2023-02-11. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability. A low privileged remote attacker could potentially exploit…
• CVE-2022-31233, published 2022-08-31. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and…
• CVE-2022-34397, published 2023-02-13. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which…