Dell Unity Operating Environment vulnerabilities

53 CVEs affecting Dell Unity Operating Environment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22277, published 2026-01-30.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-36604, published 2025-08-04. Critical severity, CVSS 9.8. EPSS: 66.4% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote…
• CVE-2025-22398, published 2025-03-28. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote…
• CVE-2022-29084, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially…
• CVE-2024-49601, published 2025-03-28. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote…
• CVE-2025-24381, published 2025-03-28. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.4 and prior, contain(s) an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
• CVE-2025-24382, published 2025-03-28. High severity, CVSS 7.3. EPSS: 1.3% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote…
• CVE-2025-24383, published 2025-03-28. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote…
• CVE-2024-0164, published 2024-02-12. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the…
• CVE-2024-0166, published 2024-02-12. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_tcpdump utility. An authenticated attacker could potentially exploit this vulnerability, leading to the…
• CVE-2022-29091, published 2022-05-26. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI. An Unauthenticated Remote Attacker could…

Latest

• CVE-2026-22277, published 2026-01-30. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2026-21418, published 2026-01-30. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-46423, published 2025-10-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-46422, published 2025-10-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-43942, published 2025-10-30. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-43941, published 2025-10-30. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-43940, published 2025-10-30. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-43939, published 2025-10-30. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local…
• CVE-2025-36607, published 2025-08-04. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the…
• CVE-2025-36606, published 2025-08-04. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nfssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping…