Known vulnerabilities in PowerStore 1000X

Vendor: Dell
Software: PowerStore 1000X
Software CPE: cpe:2.3:h:dell:powerstore_1000x:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 45
Public exploits: 10
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerStore 1000X PowerStore 1000X is affected by 45 known vulnerabilities: 9 high, 27 medium, 9 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 - 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 - 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU84849 - Command injection
CVE-2023-5752		 CWE-77 Medium
No
No
 - 28.12.2023 SB2023122824
SB2023122825
SB2023122826
and 32 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 - 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 - 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU63343 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-29155		 CWE-89 High
No
No
 - 17.05.2022 SB2022051725
SB2022051731
SB2022051919
and 27 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24302		 CWE-362 Low
No
No
 - 28.03.2022 SB2022032832
SB2022032837
SB2022033014
and 20 more
#VU54520 - Improper input validation
CVE-2020-14343		 CWE-20 High
Available
No
 - 04.07.2021 SB2021070403
SB2021070404
SB2022042259
and 18 more
#VU50367 - Covert Timing Channel
CVE-2020-25659		 CWE-385 Medium
No
No
 - 11.01.2021 SB2020111230
SB2021052024
SB2021060319
and 18 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU15559 - Improper Access Control
CVE-2018-1000805		 CWE-284 High
No
No
 - 24.10.2018 SB2018090720
SB2018102423
SB2018100403
and 15 more
#VU11301 - Improper Access Control
CVE-2018-8088		 CWE-284 Low
No
No
 - 28.03.2018 SB2018022112
SB2018032813
SB2018032817
and 27 more


Showing elements 1 - 20 out of 45