CVE-2025-36601CWE-200information-disclosure

CVE-2025-36601

Medium · published September 25, 2025

CVSS v3.1
4.0
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Information disclosure.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00402 · 33.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-25T19:16Z
Affected products (4)
ProductVersionsFixed in
dell/powerscale_onefs≥ 9.8.0.0, < 9.10.1.39.10.1.3
dell/powerscale_onefs≥ 9.5.0.0, < 9.5.1.49.5.1.4
dell/powerscale_onefs≥ 9.6.0, < 9.7.1.109.7.1.10
dell/powerscale_onefsall versions—
References (1)
https://www.dell.com/support/kbdoc/en-us/000353080/dsa-2025-272-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities · [email protected]
EPSS history
Timeline
  • 25 SEP 14:54Z
    Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability
    cvelistv5