Dell Powerflex Appliance Intelligent Catalog vulnerabilities

10 CVEs affecting Dell Powerflex Appliance Intelligent Catalog, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46371, published 2026-05-22.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-37143, published 2024-12-10. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell…
• CVE-2025-32750, published 2026-05-20. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit…
• CVE-2025-26483, published 2026-05-22. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application…
• CVE-2024-37144, published 2024-12-10. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell…
• CVE-2025-32749, published 2026-05-22. High severity, CVSS 7.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit…
• CVE-2025-32746, published 2026-05-22. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this…
• CVE-2025-32751, published 2026-05-22. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this…
• CVE-2025-32747, published 2026-05-22. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,…
• CVE-2025-32745, published 2026-05-22. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this…
• CVE-2025-46371, published 2026-05-22. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially…