CVE-2026-101217
MediumCVSS 6.5Summary
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) a Path Traversal vulnerability due to improper limitation of a pathname to a restricted directory. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
Risk Assessment
A low privileged remote attacker could access files outside the intended directory, leading to disclosure of sensitive information. This may compromise data confidentiality in the Dell Unisphere for PowerMax environment.
Recommendation
Update Dell Unisphere for PowerMax vApp to a patched version outside the 9.2.4.x range. Restrict remote access to the management interface to trusted networks.
Other vulnerabilities in Dell Unisphere for PowerMax vApp
See all- CVE-2026-101216Medium
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) a Command Injection vulnerability due to improper neutralization of special elements used in a command. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
- CVE-2026-101215Medium
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an OS Command Injection vulnerability due to improper neutralization of special elements used in an OS command. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
- CVE-2022-34363Medium
Dell Unisphere for PowerMax vApp versions prior to 10.0.0.2 contain an authorization bypass vulnerability in the Unisphere for VMAX application running in vApp.
Original NVD description (English source)
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS