Dell Solutions Enabler Virtual Appliance vulnerabilities

16 CVEs affecting Dell Solutions Enabler Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36595, published 2025-06-27.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-48665, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48664, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48663, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48662, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2024-25955, published 2024-03-28. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted…
• CVE-2024-25946, published 2024-03-28. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted…
• CVE-2022-45104, published 2023-02-11. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability. A low privileged remote attacker could potentially exploit…
• CVE-2023-48660, published 2023-12-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target…
• CVE-2023-48671, published 2023-12-14. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability leading to obtain sensitive information…
• CVE-2021-21531, published 2021-04-30. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform…

Latest

• CVE-2025-36595, published 2025-06-27. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability. A high privileged attacker…
• CVE-2023-48661, published 2023-12-14. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary…