Vulnerability Details CVE-2025-36588
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.5%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2025-36588
-
cpe:2.3:a:dell:unisphere_for_powermax:-
-
cpe:2.3:a:dell:unisphere_for_powermax:9.2.1.6
-
cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:-
-
cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:9.2.3.22