DSA-2025-425: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Unisphere 360, Dell Solutions Enabler Virtual Appliance Security Update for Multiple Vulnerabilities

Summary: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Unisphere 360, Dell Solutions Enabler Virtual Appliance remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Critical

Details

Third-Party Component CVEs More information
Oracle JRE 1.8.0_461 CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Moment.js CVE-2022-24785 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
SLES 12 SP5 CVE-2022-49980, CVE-2022-49981, CVE-2022-50007, CVE-2022-50066, CVE-2022-50080, CVE-2022-50116, CVE-2022-50127, CVE-2022-50138, CVE-2022-50141, CVE-2022-50162, CVE-2022-50185, CVE-2022-50191, CVE-2022-50228, CVE-2022-50229, CVE-2023-52813, CVE-2023-53020, CVE-2024-28752, CVE-2024-28956, CVE-2025-22022, CVE-2025-23141, CVE-2025-38075, CVE-2025-38102, CVE-2025-38103, CVE-2025-38117, CVE-2025-38122, CVE-2025-38153, CVE-2025-38173, CVE-2025-38174, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38214, CVE-2025-38245, CVE-2025-38263, CVE-2025-38313, CVE-2025-38352, CVE-2025-38386, CVE-2025-38424, CVE-2025-38430, CVE-2025-38449, CVE-2025-38457, CVE-2025-38460, CVE-2025-38464, CVE-2025-38465, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38498, CVE-2025-38499, CVE-2025-38512, CVE-2025-38513, CVE-2025-38515, CVE-2025-38546, CVE-2025-38556, CVE-2025-38563, CVE-2025-38565, CVE-2025-38617 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Windows 10 32-bit CVE-2025-59253, CVE-2025-59244, CVE-2025-59214, CVE-2025-59230, CVE-2025-59278, CVE-2025-59275, CVE-2025-59205, CVE-2025-58739, CVE-2025-59193, CVE-2025-59198, CVE-2025-59191, CVE-2025-47827, CVE-2025-59197, CVE-2025-59209, CVE-2025-59203, CVE-2025-59190, CVE-2025-59187, CVE-2025-58736, CVE-2025-58733, CVE-2025-59280, CVE-2025-59204, CVE-2025-59200, CVE-2025-58722, CVE-2025-55700, CVE-2025-59208, CVE-2025-59192, CVE-2025-58738, CVE-2025-58734, CVE-2025-58730, CVE-2025-58729, CVE-2025-58726, CVE-2025-58725, CVE-2025-58720, CVE-2025-58718, CVE-2025-58714, CVE-2025-55699, CVE-2025-55696, CVE-2025-55695, CVE-2025-55692, CVE-2025-55680, CVE-2025-55679, CVE-2025-55678, CVE-2025-55332, CVE-2025-55326, CVE-2025-53768, CVE-2025-50175, CVE-2025-53150, CVE-2025-50152, CVE-2025-25004, CVE-2025-48813, CVE-2025-59502, CVE-2016-9535, CVE-2025-59295, CVE-2025-59294, CVE-2025-59282, CVE-2025-59277, CVE-2025-59259 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2025-36589 Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control. 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-23861 Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-26357 Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2025-36589 Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control. 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-23861 Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-26357 Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

CVEs Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748, CVE-2025-36589, CVE-2026-23861, CVE-2026-26357 Unisphere for PowerMax 9.2.4.18 Host Installation Versions prior to 9.2.4.19 Version 9.2.4.19 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748, CVE-2022-49980, CVE-2022-49981, CVE-2022-50007, CVE-2022-50066, CVE-2022-50080, CVE-2022-50116, CVE-2022-50127, CVE-2022-50138, CVE-2022-50141, CVE-2022-50162, CVE-2022-50185, CVE-2022-50191, CVE-2022-50228, CVE-2022-50229, CVE-2023-52813, CVE-2023-53020, CVE-2024-28752, CVE-2024-28956, CVE-2025-22022, CVE-2025-23141, CVE-2025-38075, CVE-2025-38102, CVE-2025-38103, CVE-2025-38117, CVE-2025-38122, CVE-2025-38153, CVE-2025-38173, CVE-2025-38174, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38214, CVE-2025-38245, CVE-2025-38263, CVE-2025-38313, CVE-2025-38352, CVE-2025-38386, CVE-2025-38424, CVE-2025-38430, CVE-2025-38449, CVE-2025-38457, CVE-2025-38460, CVE-2025-38464, CVE-2025-38465, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38498, CVE-2025-38499, CVE-2025-38512, CVE-2025-38513, CVE-2025-38515, CVE-2025-38546, CVE-2025-38556, CVE-2025-38563, CVE-2025-38565, CVE-2025-38617, CVE-2025-36589, CVE-2026-23861, CVE-2026-26357 Unisphere for PowerMax Virtual Appliance 9.2.4.17 Virtual Appliance Versions prior to 9.2.4.19 Version 9.2.4.19 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748 Unisphere 360 9.2.4.39 Host Installation Versions prior to 9.2.4.41 Version 9.2.4.41 or later https://www.dell.com/support/home/product-support/product/unisphere-360/drivers
CVE-2022-49980, CVE-2022-49981, CVE-2022-50007, CVE-2022-50066, CVE-2022-50080, CVE-2022-50116, CVE-2022-50127, CVE-2022-50138, CVE-2022-50141, CVE-2022-50162, CVE-2022-50185, CVE-2022-50191, CVE-2022-50228, CVE-2022-50229, CVE-2023-52813, CVE-2023-53020, CVE-2024-28752, CVE-2024-28956, CVE-2025-22022, CVE-2025-23141, CVE-2025-38075, CVE-2025-38102, CVE-2025-38103, CVE-2025-38117, CVE-2025-38122, CVE-2025-38153, CVE-2025-38173, CVE-2025-38174, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38214, CVE-2025-38245, CVE-2025-38263, CVE-2025-38313, CVE-2025-38352, CVE-2025-38386, CVE-2025-38424, CVE-2025-38430, CVE-2025-38449, CVE-2025-38457, CVE-2025-38460, CVE-2025-38464, CVE-2025-38465, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38498, CVE-2025-38499, CVE-2025-38512, CVE-2025-38513, CVE-2025-38515, CVE-2025-38546, CVE-2025-38556, CVE-2025-38563, CVE-2025-38565, CVE-2025-38617 Solutions Enabler Virtual Appliance 9.2.4.12 Virtual Appliance Versions prior to 9.2.4.13 Version 9.2.4.13 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
CVE-2025-59253, CVE-2025-59244, CVE-2025-59214, CVE-2025-59230, CVE-2025-59278, CVE-2025-59275, CVE-2025-59205, CVE-2025-58739, CVE-2025-59193, CVE-2025-59198, CVE-2025-59191, CVE-2025-47827, CVE-2025-59197, CVE-2025-59209, CVE-2025-59203, CVE-2025-59190, CVE-2025-59187, CVE-2025-58736, CVE-2025-58733, CVE-2025-59280, CVE-2025-59204, CVE-2025-59200, CVE-2025-58722, CVE-2025-55700, CVE-2025-59208, CVE-2025-59192, CVE-2025-58738, CVE-2025-58734, CVE-2025-58730, CVE-2025-58729, CVE-2025-58726, CVE-2025-58725, CVE-2025-58720, CVE-2025-58718, CVE-2025-58714, CVE-2025-55699, CVE-2025-55696, CVE-2025-55695, CVE-2025-55692, CVE-2025-55680, CVE-2025-55679, CVE-2025-55678, CVE-2025-55332, CVE-2025-55326, CVE-2025-53768, CVE-2025-50175, CVE-2025-53150, CVE-2025-50152, CVE-2025-25004, CVE-2025-48813, CVE-2025-59502, CVE-2016-9535, CVE-2025-59295, CVE-2025-59294, CVE-2025-59282, CVE-2025-59277, CVE-2025-59259 Dell PowerMax EEM 5978 Embedded Management Versions prior to 5978.720.720.11110 Version 5978.720.720.11110 or later

Contact customer support and request DSA-2025-425

Requests accepted: 12/31/2025

 

CVEs Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748, CVE-2025-36589, CVE-2026-23861, CVE-2026-26357 Unisphere for PowerMax 9.2.4.18 Host Installation Versions prior to 9.2.4.19 Version 9.2.4.19 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748, CVE-2022-49980, CVE-2022-49981, CVE-2022-50007, CVE-2022-50066, CVE-2022-50080, CVE-2022-50116, CVE-2022-50127, CVE-2022-50138, CVE-2022-50141, CVE-2022-50162, CVE-2022-50185, CVE-2022-50191, CVE-2022-50228, CVE-2022-50229, CVE-2023-52813, CVE-2023-53020, CVE-2024-28752, CVE-2024-28956, CVE-2025-22022, CVE-2025-23141, CVE-2025-38075, CVE-2025-38102, CVE-2025-38103, CVE-2025-38117, CVE-2025-38122, CVE-2025-38153, CVE-2025-38173, CVE-2025-38174, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38214, CVE-2025-38245, CVE-2025-38263, CVE-2025-38313, CVE-2025-38352, CVE-2025-38386, CVE-2025-38424, CVE-2025-38430, CVE-2025-38449, CVE-2025-38457, CVE-2025-38460, CVE-2025-38464, CVE-2025-38465, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38498, CVE-2025-38499, CVE-2025-38512, CVE-2025-38513, CVE-2025-38515, CVE-2025-38546, CVE-2025-38556, CVE-2025-38563, CVE-2025-38565, CVE-2025-38617, CVE-2025-36589, CVE-2026-23861, CVE-2026-26357 Unisphere for PowerMax Virtual Appliance 9.2.4.17 Virtual Appliance Versions prior to 9.2.4.19 Version 9.2.4.19 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
CVE-2025-31257, CVE-2025-53066, CVE-2025-53057, CVE-2025-61755, CVE-2025-61748 Unisphere 360 9.2.4.39 Host Installation Versions prior to 9.2.4.41 Version 9.2.4.41 or later https://www.dell.com/support/home/product-support/product/unisphere-360/drivers
CVE-2022-49980, CVE-2022-49981, CVE-2022-50007, CVE-2022-50066, CVE-2022-50080, CVE-2022-50116, CVE-2022-50127, CVE-2022-50138, CVE-2022-50141, CVE-2022-50162, CVE-2022-50185, CVE-2022-50191, CVE-2022-50228, CVE-2022-50229, CVE-2023-52813, CVE-2023-53020, CVE-2024-28752, CVE-2024-28956, CVE-2025-22022, CVE-2025-23141, CVE-2025-38075, CVE-2025-38102, CVE-2025-38103, CVE-2025-38117, CVE-2025-38122, CVE-2025-38153, CVE-2025-38173, CVE-2025-38174, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38214, CVE-2025-38245, CVE-2025-38263, CVE-2025-38313, CVE-2025-38352, CVE-2025-38386, CVE-2025-38424, CVE-2025-38430, CVE-2025-38449, CVE-2025-38457, CVE-2025-38460, CVE-2025-38464, CVE-2025-38465, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38498, CVE-2025-38499, CVE-2025-38512, CVE-2025-38513, CVE-2025-38515, CVE-2025-38546, CVE-2025-38556, CVE-2025-38563, CVE-2025-38565, CVE-2025-38617 Solutions Enabler Virtual Appliance 9.2.4.12 Virtual Appliance Versions prior to 9.2.4.13 Version 9.2.4.13 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
CVE-2025-59253, CVE-2025-59244, CVE-2025-59214, CVE-2025-59230, CVE-2025-59278, CVE-2025-59275, CVE-2025-59205, CVE-2025-58739, CVE-2025-59193, CVE-2025-59198, CVE-2025-59191, CVE-2025-47827, CVE-2025-59197, CVE-2025-59209, CVE-2025-59203, CVE-2025-59190, CVE-2025-59187, CVE-2025-58736, CVE-2025-58733, CVE-2025-59280, CVE-2025-59204, CVE-2025-59200, CVE-2025-58722, CVE-2025-55700, CVE-2025-59208, CVE-2025-59192, CVE-2025-58738, CVE-2025-58734, CVE-2025-58730, CVE-2025-58729, CVE-2025-58726, CVE-2025-58725, CVE-2025-58720, CVE-2025-58718, CVE-2025-58714, CVE-2025-55699, CVE-2025-55696, CVE-2025-55695, CVE-2025-55692, CVE-2025-55680, CVE-2025-55679, CVE-2025-55678, CVE-2025-55332, CVE-2025-55326, CVE-2025-53768, CVE-2025-50175, CVE-2025-53150, CVE-2025-50152, CVE-2025-25004, CVE-2025-48813, CVE-2025-59502, CVE-2016-9535, CVE-2025-59295, CVE-2025-59294, CVE-2025-59282, CVE-2025-59277, CVE-2025-59259 Dell PowerMax EEM 5978 Embedded Management Versions prior to 5978.720.720.11110 Version 5978.720.720.11110 or later

Contact customer support and request DSA-2025-425

Requests accepted: 12/31/2025

 

Revision History

RevisionDateDescription
1.02025-12-19Initial Release
2.02026-01-06Updated the fix version for Dell PowerMax EEM 5978
3.02026-01-06Added CVE-2025-36589 to the Affected Products and Remediation table
4.02026-01-15Added CVE-2025-36588 to the Affected Products and Remediation table
5.02026-02-16Added CVE-2026-23861 to the Affected Products and Remediation table
6.02026-02-17Added CVE-2026-26357 to the Affected Products and Remediation table
7.02026-02-25Removed CVE-2025-36588 and added it to DSA-2026-102

 

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

PowerMax, PowerMax, PowerMaxOS 10, Solutions Enabler, Unisphere 360, Unisphere for PowerMax, VMAX 250F, VMAX 950F, VMAX Open Host Management Software
Article Properties
Article Number: 000402262
Article Type: Dell Security Advisory
Last Modified: 25 Feb 2026
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.