Filtered by vendor Dell Subscriptions
Filtered by product Ecs Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-31231 1 Dell 1 Ecs 2026-05-23 5.9 Medium
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
CVE-2025-43992 1 Dell 3 Ecs, Elastic Cloud Storage, Objectscale 2026-05-16 5.6 Medium
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.
CVE-2026-35157 1 Dell 3 Ecs, Elastic Cloud Storage, Objectscale 2026-05-12 5.8 Medium
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-26946 1 Dell 3 Ecs, Elastic Cloud Storage, Objectscale 2026-05-12 6.7 Medium
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-40636 1 Dell 3 Ecs, Elastic Cloud Storage, Objectscale 2026-05-12 9.8 Critical
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.