cvedb.io
CVE-2025-27686
LOW · CVSS 2.7
EPSS exploitation probability: 0%
Published 2025-04-07T14:15:24.210 · Last modified 2026-06-17T09:04:03.833

Summary

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected products

dell — unisphere_for_powermax

Does this affect you?

Add your gear to cvedb and we'll alert you only when dell ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.