CVE-2025-27686

—

CVSS 3.1

4.7 medium

EPSS

<1%p21

Published

Apr 7, 2025 (Apr 7, 2025)

Modified

Jun 17, 2026

Description

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Vendors: dell
Products: unisphere for powermax
Weakness: CWE-90
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.