CVE-2025-27686CWE-90
Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special…
Low · published April 7, 2025
What it is
Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
The record
Technical detail
- CVSS v3.1
- 2.7 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00290 · 20.4th percentile
- Weakness
- CWE-90 · Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
- Published
- 2025-04-07T13:23Z
EPSS history
Timeline