Vulnerability Database

320,936

Total vulnerabilities in the database

CVE-2025-36589

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control.

  • Published: Jan 6, 2026
  • Updated: Jan 7, 2026
  • CVE: CVE-2025-36589
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.6
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
dell / unisphere_for_powermax 9.2.4.18 9.2.4.18.x
dell / unisphere_for_powermax_virtual_appliance 9.2.4.17 9.2.4.19