CVE-2025-32746CWE-922

CVE-2025-32746

Medium · published May 22, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00103 · 0.9th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2026-05-22T18:16Z
Affected products (3)
ProductVersionsFixed in
dell/powerflex_appliance_intelligent_catalog< 48.383.0048.383.00
dell/powerflex_manager≤ 4.6.2—
dell/powerflex_rack< 3.7.8.03.7.8.0
References (2)
https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · [email protected]https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · [email protected]
EPSS history
Timeline
  • 22 MAY 13:13Z
    Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability
    cvelistv5