← Database

CVE-2025-27686

LOW CVSS: 2.7 Published: 2025-04-07 Modified: 2026-06-17

Description

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected Platforms

Dell Unisphere For Powermax

Weakness Type

CWE-90, NVD-CWE-Other

References