Dell Inventory Collector vulnerabilities

2 CVEs affecting Dell Inventory Collector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47480, published 2024-12-18.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-47480, published 2024-12-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this…
• CVE-2024-37129, published 2024-07-31. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary…