{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Dell vulnerabilities","home_page_url":"https://patchfirst.co/vendor/dell/","feed_url":"https://patchfirst.co/feed/vendor/dell.json","description":"New and newly exploited Dell CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-86400","url":"https://patchfirst.co/cve/CVE-2026-86400/","title":"CVE-2026-86400: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","content_text":"Dell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.9% (higher than 59.5% of CVEs). CVSS 9.8 CRITICAL. Priority 20.1 of 100.","summary":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-30T18:18:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20.1,"kev":null,"epss":{"score":0.00896,"percentile":0.59525},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"PowerProtect Data Domain","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-103780","url":"https://patchfirst.co/cve/CVE-2026-103780/","title":"CVE-2026-103780: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","content_text":"Dell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.8% (higher than 57.5% of CVEs). CVSS 9.8 CRITICAL. Priority 19.4 of 100.","summary":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-29T11:17:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.0083,"percentile":0.57522},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"PowerProtect Data Domain","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-86384","url":"https://patchfirst.co/cve/CVE-2026-86384/","title":"CVE-2026-86384: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","content_text":"Dell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.5% (higher than 40.9% of CVEs). CVSS 9.8 CRITICAL. Priority 16.4 of 100.","summary":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-29T11:17:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.4,"kev":null,"epss":{"score":0.00472,"percentile":0.40858},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"PowerProtect Data Domain","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-103792","url":"https://patchfirst.co/cve/CVE-2026-103792/","title":"CVE-2026-103792: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…","content_text":"Dell · PowerProtect Data Domain Management Center. Not in CISA KEV. EPSS 0.4% (higher than 30.8% of CVEs). CVSS 9.6 CRITICAL. Priority 14.0 of 100.","summary":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-29T11:17:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14,"kev":null,"epss":{"score":0.00369,"percentile":0.30759},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"PowerProtect Data Domain Management Center","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-86397","url":"https://patchfirst.co/cve/CVE-2026-86397/","title":"CVE-2026-86397: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","content_text":"Dell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.3% (higher than 27.1% of CVEs). CVSS 9.8 CRITICAL. Priority 13.6 of 100.","summary":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-30T18:18:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.6,"kev":null,"epss":{"score":0.00336,"percentile":0.27057},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"PowerProtect Data Domain","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-103799","url":"https://patchfirst.co/cve/CVE-2026-103799/","title":"CVE-2026-103799: Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…","content_text":"Dell · PowerProtect Data Domain Management Center. Not in CISA KEV. EPSS 0.3% (higher than 27.6% of CVEs). CVSS 9.6 CRITICAL. Priority 13.3 of 100.","summary":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-28T14:13:52.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.3,"kev":null,"epss":{"score":0.0034,"percentile":0.27563},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"PowerProtect Data Domain Management Center","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76779","url":"https://patchfirst.co/cve/CVE-2026-76779/","title":"CVE-2026-76779: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of…","content_text":"Dell · Secure Connect Gateway (SCG) Policy Manager. Not in CISA KEV. EPSS 0.3% (higher than 19.1% of CVEs). CVSS 9.8 CRITICAL. Priority 13.2 of 100.","summary":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of…","date_published":"2026-10-09T00:00:00.000Z","date_modified":"2026-10-13T16:39:37.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.2,"kev":null,"epss":{"score":0.00269,"percentile":0.19147},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Secure Connect Gateway (SCG) Policy Manager","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-86360","url":"https://patchfirst.co/cve/CVE-2026-86360/","title":"CVE-2026-86360: Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory…","content_text":"Dell · System Update. Not in CISA KEV. EPSS 0.6% (higher than 48.6% of CVEs). CVSS 9.6 CRITICAL. Priority 18.6 of 100.","summary":"Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-13T18:18:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00598,"percentile":0.48595},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"System Update","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63688","url":"https://patchfirst.co/cve/CVE-2026-63688/","title":"CVE-2026-63688: Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical…","content_text":"Dell · Dell Container Storage Modules (CSM). Not in CISA KEV. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 10.0 CRITICAL. Priority 17.8 of 100.","summary":"Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T14:15:22.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.8,"kev":null,"epss":{"score":0.00487,"percentile":0.41904},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Dell Container Storage Modules (CSM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63692","url":"https://patchfirst.co/cve/CVE-2026-63692/","title":"CVE-2026-63692: Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function…","content_text":"Dell · Container Storage Modules. Not in CISA KEV. EPSS 0.4% (higher than 36.4% of CVEs). CVSS 10.0 CRITICAL. Priority 16.7 of 100.","summary":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-09T02:17:03.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.0042,"percentile":0.36359},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Container Storage Modules","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-61421","url":"https://patchfirst.co/cve/CVE-2026-61421/","title":"CVE-2026-61421: Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in…","content_text":"Dell · Container Storage Modules. Not in CISA KEV. EPSS 0.3% (higher than 28% of CVEs). CVSS 9.8 CRITICAL. Priority 14.9 of 100.","summary":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T14:15:46.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.9,"kev":null,"epss":{"score":0.00344,"percentile":0.2796},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Container Storage Modules","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-67269","url":"https://patchfirst.co/cve/CVE-2026-67269/","title":"CVE-2026-67269: Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management…","content_text":"Dell · Container Storage Modules (CSM). Not in CISA KEV. EPSS 0.3% (higher than 26.8% of CVEs). CVSS 9.9 CRITICAL. Priority 14.7 of 100.","summary":"Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T18:18:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.7,"kev":null,"epss":{"score":0.00334,"percentile":0.26779},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Container Storage Modules (CSM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-82162","url":"https://patchfirst.co/cve/CVE-2026-82162/","title":"CVE-2026-82162: Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability","content_text":"Dell · Command | Configure (DCC). Not in CISA KEV. EPSS 0.3% (higher than 23.1% of CVEs). CVSS 9.8 CRITICAL. Priority 13.7 of 100.","summary":"Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-13T18:23:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00303,"percentile":0.23135},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Command | Configure (DCC)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-67273","url":"https://patchfirst.co/cve/CVE-2026-67273/","title":"CVE-2026-67273: Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements…","content_text":"Dell · Container Storage Modules. Not in CISA KEV. EPSS 0.3% (higher than 21.1% of CVEs). CVSS 9.6 CRITICAL. Priority 13.4 of 100.","summary":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-20T13:13:56.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.4,"kev":null,"epss":{"score":0.00286,"percentile":0.21128},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Container Storage Modules","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63691","url":"https://patchfirst.co/cve/CVE-2026-63691/","title":"CVE-2026-63691: Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell…","content_text":"Dell · Container Storage Modules. Not in CISA KEV. EPSS 0.2% (higher than 6.2% of CVEs). CVSS 9.6 CRITICAL. Priority 10.2 of 100.","summary":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-20T14:11:32.000Z","tags":[],"_patchfirst":{"reason":"published","priority":10.2,"kev":null,"epss":{"score":0.00168,"percentile":0.06158},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Container Storage Modules","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-22769#kev","url":"https://patchfirst.co/cve/CVE-2026-22769/","title":"[KEV] CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","content_text":"Dell · RecoverPoint for Virtual Machines (RP4VMs). In CISA KEV since 2026-02-18. ENISA EUVD lists it as exploited. EPSS 13.5% (higher than 96.4% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 69.3 of 100.","summary":"Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","date_published":"2026-02-18T00:00:00.000Z","date_modified":"2026-06-17T10:20:23.000Z","tags":["kev","T1078","T1068"],"_patchfirst":{"reason":"kev","priority":69.3,"kev":{"dateAdded":"2026-02-18","ransomware":false},"epss":{"score":0.13525,"percentile":0.96448},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"RecoverPoint for Virtual Machines (RP4VMs)","techniqueIds":["T1078","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-36604","url":"https://patchfirst.co/cve/CVE-2025-36604/","title":"CVE-2025-36604: Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…","content_text":"Dell · Unity. Not in CISA KEV. EPSS 66.6% (higher than 99.28% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 65.0 of 100.","summary":"Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…","date_published":"2025-08-04T00:00:00.000Z","date_modified":"2026-02-26T17:50:01.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65,"kev":null,"epss":{"score":0.66555,"percentile":0.99284},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"Unity","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-24422","url":"https://patchfirst.co/cve/CVE-2022-24422/","title":"CVE-2022-24422: Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability","content_text":"Dell · Integrated Dell Remote Access Controller 9. Not in CISA KEV. EPSS 58.5% (higher than 99.1% of CVEs). CVSS 9.6 CRITICAL. Priority 27.2 of 100.","summary":"Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability","date_published":"2022-05-26T00:00:00.000Z","date_modified":"2024-09-16T22:31:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":27.2,"kev":null,"epss":{"score":0.5854,"percentile":0.99098},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Integrated Dell Remote Access Controller 9","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-21551#kev","url":"https://patchfirst.co/cve/CVE-2021-21551/","title":"[KEV] CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability","content_text":"Dell · dbutil Driver. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 79.6% (higher than 99.61% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 68.4 of 100.","summary":"Dell dbutil Driver Insufficient Access Control Vulnerability","date_published":"2022-03-31T00:00:00.000Z","date_modified":"2026-06-17T03:35:45.000Z","tags":["kev","public-exploit","T1068","T1005","T1499.004"],"_patchfirst":{"reason":"kev","priority":68.4,"kev":{"dateAdded":"2022-03-31","ransomware":false},"epss":{"score":0.79628,"percentile":0.99605},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"dbutil Driver","techniqueIds":["T1068","T1005","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-36276","url":"https://patchfirst.co/cve/CVE-2021-36276/","title":"CVE-2021-36276: Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead…","content_text":"Dell · dbutil. Not in CISA KEV. EPSS 0.3% (higher than 18.9% of CVEs). CVSS 8.8 HIGH. Priority 44.9 of 100.","summary":"Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead…","date_published":"2021-08-09T00:00:00.000Z","date_modified":"2024-09-17T02:42:58.000Z","tags":[],"_patchfirst":{"reason":"published","priority":44.9,"kev":null,"epss":{"score":0.00267,"percentile":0.18866},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"dbutil","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5369","url":"https://patchfirst.co/cve/CVE-2020-5369/","title":"CVE-2020-5369: Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege…","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.2% (higher than 68.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 19.9 of 100.","summary":"Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege…","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-16T19:46:53.000Z","tags":["T1068"],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.01214,"percentile":0.68501},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5386","url":"https://patchfirst.co/cve/CVE-2020-5386/","title":"CVE-2020-5386: Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability","content_text":"Dell · Elastic Cloud Storage. Not in CISA KEV. EPSS 1.3% (higher than 69.5% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1005 Data from Local System. Priority 19.6 of 100.","summary":"Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-16T20:58:12.000Z","tags":["T1005"],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.01256,"percentile":0.69495},"cvss":{"score":8.1,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"Elastic Cloud Storage","techniqueIds":["T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5379","url":"https://patchfirst.co/cve/CVE-2020-5379/","title":"CVE-2020-5379: Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability","content_text":"Dell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.9% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.5 of 100.","summary":"Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-16T19:30:42.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":11.5,"kev":null,"epss":{"score":0.00397,"percentile":0.33852},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"CPG BIOS","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5378","url":"https://patchfirst.co/cve/CVE-2020-5378/","title":"CVE-2020-5378: Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability","content_text":"Dell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.","summary":"Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-17T01:51:46.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":11.4,"kev":null,"epss":{"score":0.0039,"percentile":0.33136},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"CPG BIOS","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5376","url":"https://patchfirst.co/cve/CVE-2020-5376/","title":"CVE-2020-5376: Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability","content_text":"Dell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.","summary":"Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-16T22:55:30.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":11.4,"kev":null,"epss":{"score":0.0039,"percentile":0.33136},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"CPG BIOS","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5374","url":"https://patchfirst.co/cve/CVE-2020-5374/","title":"CVE-2020-5374: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…","content_text":"Dell · OMIMSSC (OpenManage Integration for Microsoft System Center). Not in CISA KEV. EPSS 1.0% (higher than 64% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078.001 Default Accounts. Priority 19.0 of 100.","summary":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…","date_published":"2020-07-14T00:00:00.000Z","date_modified":"2024-09-16T18:43:38.000Z","tags":["T1078.001"],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.0104,"percentile":0.63959},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"OMIMSSC (OpenManage Integration for Microsoft System Center)","techniqueIds":["T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5373","url":"https://patchfirst.co/cve/CVE-2020-5373/","title":"CVE-2020-5373: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…","content_text":"Dell · OMIMSSC (OpenManage Integration for Microsoft System Center). Not in CISA KEV. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1005 Data from Local System. Priority 19.0 of 100.","summary":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…","date_published":"2020-07-14T00:00:00.000Z","date_modified":"2024-09-17T03:02:58.000Z","tags":["T1005"],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.01387,"percentile":0.72218},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"OMIMSSC (OpenManage Integration for Microsoft System Center)","techniqueIds":["T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5366","url":"https://patchfirst.co/cve/CVE-2020-5366/","title":"CVE-2020-5366: Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability","content_text":"Dell · Integrated Dell Remote Access Controller (iDRAC). Not in CISA KEV. EPSS 1.8% (higher than 78.6% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 20.7 of 100.","summary":"Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability","date_published":"2020-07-09T00:00:00.000Z","date_modified":"2024-09-16T17:29:00.000Z","tags":["T1190","T1005"],"_patchfirst":{"reason":"published","priority":20.7,"kev":null,"epss":{"score":0.01808,"percentile":0.78573},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"Integrated Dell Remote Access Controller (iDRAC)","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5371","url":"https://patchfirst.co/cve/CVE-2020-5371/","title":"CVE-2020-5371: Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions…","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.2% (higher than 66.9% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 19.0 of 100.","summary":"Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions…","date_published":"2020-07-06T00:00:00.000Z","date_modified":"2024-09-16T19:52:24.000Z","tags":["T1068","T1005"],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.01152,"percentile":0.66926},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5345","url":"https://patchfirst.co/cve/CVE-2020-5345/","title":"CVE-2020-5345: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions…","content_text":"Dell · Unisphere for PowerMax. Not in CISA KEV. EPSS 0.7% (higher than 54.8% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1565.001 Stored Data Manipulation; T1190 Exploit Public-Facing Application. Priority 15.4 of 100.","summary":"Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions…","date_published":"2020-06-23T00:00:00.000Z","date_modified":"2024-09-17T01:51:14.000Z","tags":["T1565.001","T1190"],"_patchfirst":{"reason":"published","priority":15.4,"kev":null,"epss":{"score":0.00748,"percentile":0.54837},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Unisphere for PowerMax","techniqueIds":["T1565.001","T1190"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5358","url":"https://patchfirst.co/cve/CVE-2020-5358/","title":"CVE-2020-5358: Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege…","content_text":"Dell · Dell Encryption Enterprise. Not in CISA KEV. EPSS 0.2% (higher than 8.8% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 6.5 of 100.","summary":"Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege…","date_published":"2020-06-15T00:00:00.000Z","date_modified":"2024-09-17T01:56:50.000Z","tags":["T1068"],"_patchfirst":{"reason":"published","priority":6.5,"kev":null,"epss":{"score":0.00191,"percentile":0.08829},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Dell Encryption Enterprise","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5362","url":"https://patchfirst.co/cve/CVE-2020-5362/","title":"CVE-2020-5362: Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell…","content_text":"Dell · Dell Client Consumer and Commercial platforms. Not in CISA KEV. EPSS 0.3% (higher than 21.6% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1098 Account Manipulation. Priority 9.3 of 100.","summary":"Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell…","date_published":"2020-06-10T00:00:00.000Z","date_modified":"2024-09-17T02:41:23.000Z","tags":["T1068","T1098"],"_patchfirst":{"reason":"published","priority":9.3,"kev":null,"epss":{"score":0.0029,"percentile":0.21612},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"Dell Client Consumer and Commercial platforms","techniqueIds":["T1068","T1098"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5365","url":"https://patchfirst.co/cve/CVE-2020-5365/","title":"CVE-2020-5365: Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1078.001 Default Accounts. Priority 16.2 of 100.","summary":"Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability","date_published":"2020-05-20T00:00:00.000Z","date_modified":"2024-09-16T17:17:39.000Z","tags":["T1110","T1078.001"],"_patchfirst":{"reason":"published","priority":16.2,"kev":null,"epss":{"score":0.00985,"percentile":0.62343},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1110","T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5364","url":"https://patchfirst.co/cve/CVE-2020-5364/","title":"CVE-2020-5364: Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078.001 Default Accounts; T1005 Data from Local System. Priority 16.2 of 100.","summary":"Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability","date_published":"2020-05-20T00:00:00.000Z","date_modified":"2024-09-16T19:10:16.000Z","tags":["T1078.001","T1005"],"_patchfirst":{"reason":"published","priority":16.2,"kev":null,"epss":{"score":0.00985,"percentile":0.62343},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1078.001","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5332","url":"https://patchfirst.co/cve/CVE-2020-5332/","title":"CVE-2020-5332: RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability","content_text":"Dell · RSA Archer. Not in CISA KEV. EPSS 2.2% (higher than 82.9% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1059 Command and Scripting Interpreter. Priority 21.6 of 100.","summary":"RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability","date_published":"2020-05-04T00:00:00.000Z","date_modified":"2024-09-16T22:41:16.000Z","tags":["T1059"],"_patchfirst":{"reason":"published","priority":21.6,"kev":null,"epss":{"score":0.02248,"percentile":0.82865},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"RSA Archer","techniqueIds":["T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5331","url":"https://patchfirst.co/cve/CVE-2020-5331/","title":"CVE-2020-5331: RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability","content_text":"Dell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1005 Data from Local System. Priority 16.9 of 100.","summary":"RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability","date_published":"2020-05-04T00:00:00.000Z","date_modified":"2024-09-17T02:06:43.000Z","tags":["T1005"],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.0072,"percentile":0.53882},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"RSA Archer","techniqueIds":["T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5336","url":"https://patchfirst.co/cve/CVE-2020-5336/","title":"CVE-2020-5336: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","content_text":"Dell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.","summary":"RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","date_published":"2020-05-04T00:00:00.000Z","date_modified":"2024-09-17T03:14:04.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00705,"percentile":0.53336},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"RSA Archer","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5350","url":"https://patchfirst.co/cve/CVE-2020-5350/","title":"CVE-2020-5350: Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection…","content_text":"Dell · Integrated Data Protection Appliance. Not in CISA KEV. EPSS 2.0% (higher than 80.5% of CVEs). CVSS 7.9 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1098 Account Manipulation. Priority 21.6 of 100.","summary":"Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection…","date_published":"2020-04-15T00:00:00.000Z","date_modified":"2024-09-16T17:54:54.000Z","tags":["T1059","T1098"],"_patchfirst":{"reason":"published","priority":21.6,"kev":null,"epss":{"score":0.01975,"percentile":0.80461},"cvss":{"score":7.9,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"Integrated Data Protection Appliance","techniqueIds":["T1059","T1098"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5340","url":"https://patchfirst.co/cve/CVE-2020-5340/","title":"CVE-2020-5340: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.","summary":"RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","date_published":"2020-03-25T00:00:00.000Z","date_modified":"2024-09-17T03:43:40.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00669,"percentile":0.51912},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5339","url":"https://patchfirst.co/cve/CVE-2020-5339/","title":"CVE-2020-5339: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.","summary":"RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","date_published":"2020-03-25T00:00:00.000Z","date_modified":"2024-09-17T00:06:00.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00669,"percentile":0.51912},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18582","url":"https://patchfirst.co/cve/CVE-2019-18582/","title":"CVE-2019-18582: Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to…","content_text":"Dell · Data Protection Advisor. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1059 Command and Scripting Interpreter. Priority 24.7 of 100.","summary":"Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to…","date_published":"2020-03-18T00:00:00.000Z","date_modified":"2024-09-17T03:58:36.000Z","tags":["T1059"],"_patchfirst":{"reason":"published","priority":24.7,"kev":null,"epss":{"score":0.04573,"percentile":0.91609},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.0"},"vendor":"Dell","product":"Data Protection Advisor","techniqueIds":["T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18581","url":"https://patchfirst.co/cve/CVE-2019-18581/","title":"CVE-2019-18581: Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to…","content_text":"Dell · Data Protection Advisor. Not in CISA KEV. EPSS 3.9% (higher than 90.3% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1059 Command and Scripting Interpreter. Priority 24.4 of 100.","summary":"Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to…","date_published":"2020-03-18T00:00:00.000Z","date_modified":"2024-09-16T23:01:47.000Z","tags":["T1059"],"_patchfirst":{"reason":"published","priority":24.4,"kev":null,"epss":{"score":0.03919,"percentile":0.90323},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.0"},"vendor":"Dell","product":"Data Protection Advisor","techniqueIds":["T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3762","url":"https://patchfirst.co/cve/CVE-2019-3762/","title":"CVE-2019-3762: Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust…","content_text":"Dell · Data Protection Central. Not in CISA KEV. EPSS 0.6% (higher than 51% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1588.004 Digital Certificates; T1553 Subvert Trust Controls. Priority 15.5 of 100.","summary":"Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust…","date_published":"2020-03-18T00:00:00.000Z","date_modified":"2024-09-16T23:15:44.000Z","tags":["T1588.004","T1553"],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00648,"percentile":0.51018},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"Data Protection Central","techniqueIds":["T1588.004","T1553"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18578","url":"https://patchfirst.co/cve/CVE-2019-18578/","title":"CVE-2019-18578: Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability","content_text":"Dell · XtremIO. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 19.6 of 100.","summary":"Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability","date_published":"2020-03-13T00:00:00.000Z","date_modified":"2024-09-16T23:41:09.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.01127,"percentile":0.66293},"cvss":{"score":9,"severity":"CRITICAL","version":"3.0"},"vendor":"Dell","product":"XtremIO","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5328","url":"https://patchfirst.co/cve/CVE-2020-5328/","title":"CVE-2020-5328: Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough…","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 21.3 of 100.","summary":"Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough…","date_published":"2020-03-06T00:00:00.000Z","date_modified":"2024-09-16T18:29:46.000Z","tags":["T1068"],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.01387,"percentile":0.7223},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5326","url":"https://patchfirst.co/cve/CVE-2020-5326/","title":"CVE-2020-5326: Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…","content_text":"Dell · Dell Client Consumer and Commercial Platforms. Not in CISA KEV. EPSS 0.3% (higher than 28.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1542.001 System Firmware. Priority 10.0 of 100.","summary":"Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…","date_published":"2020-02-21T00:00:00.000Z","date_modified":"2024-09-17T01:56:45.000Z","tags":["T1068","T1542.001"],"_patchfirst":{"reason":"published","priority":10,"kev":null,"epss":{"score":0.00349,"percentile":0.2858},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Dell Client Consumer and Commercial Platforms","techniqueIds":["T1068","T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18573","url":"https://patchfirst.co/cve/CVE-2019-18573/","title":"CVE-2019-18573: The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","content_text":"Dell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 1.0% (higher than 62.4% of CVEs). CVSS 8.7 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 18.6 of 100.","summary":"The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","date_published":"2019-12-18T00:00:00.000Z","date_modified":"2024-09-16T16:28:49.000Z","tags":["T1563"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00986,"percentile":0.6235},"cvss":{"score":8.7,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"RSA Identity Governance & Lifecycle","techniqueIds":["T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18571","url":"https://patchfirst.co/cve/CVE-2019-18571/","title":"CVE-2019-18571: The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","content_text":"Dell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 0.5% (higher than 43% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 12.4 of 100.","summary":"The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","date_published":"2019-12-18T00:00:00.000Z","date_modified":"2024-09-16T19:10:42.000Z","tags":["T1204.002","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":12.4,"kev":null,"epss":{"score":0.00503,"percentile":0.43038},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Identity Governance & Lifecycle","techniqueIds":["T1204.002","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3750","url":"https://patchfirst.co/cve/CVE-2019-3750/","title":"CVE-2019-3750: Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability","content_text":"Dell · Dell Command Update (DCU). Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 5.6 MEDIUM. ATT&CK: T1485 Data Destruction. Priority 8.9 of 100.","summary":"Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability","date_published":"2019-12-03T00:00:00.000Z","date_modified":"2024-09-16T23:11:52.000Z","tags":["T1485"],"_patchfirst":{"reason":"published","priority":8.9,"kev":null,"epss":{"score":0.00319,"percentile":0.24877},"cvss":{"score":5.6,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"Dell Command Update (DCU)","techniqueIds":["T1485"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3767","url":"https://patchfirst.co/cve/CVE-2019-3767/","title":"CVE-2019-3767: Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability","content_text":"Dell · ImageAssist. Not in CISA KEV. EPSS 0.2% (higher than 8.8% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1005 Data from Local System. Priority 7.0 of 100.","summary":"Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability","date_published":"2019-10-14T00:00:00.000Z","date_modified":"2024-09-17T01:21:08.000Z","tags":["T1005"],"_patchfirst":{"reason":"published","priority":7,"kev":null,"epss":{"score":0.00191,"percentile":0.08756},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"ImageAssist","techniqueIds":["T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}