CVE-2025-36595

Katalog CVE

CVSS 7.2 · High EPSS 0,65%

Kerentanan Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') pada dell solutions enabler virtual appliance, dell unisphere for powermax virtual appliance. Skor CVSS 3.1 7.2 (High) menurut emc.com.

Deskripsi (NVD)

Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Rincian

Terbit di NVD

27 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber emc.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-us/000337554/dsa-2025-235-dell-powermaxos-dell-powermax-eem-dell-unisphe... advisory vendor