Elastic Cloud Storage (Dell) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2026-05-22. Vendor: Dell.

CVEs of Elastic Cloud Storage

• CVE-2022-31231 - CVSS 7.5 (high), 2026-05-22: Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may…
• CVE-2026-35157 - CVSS 9.8 (critical), 2026-05-11: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV…
• CVE-2026-26946 - CVSS 6.7 (medium), 2026-05-11: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A…
• CVE-2026-40636 - CVSS 9.8 (critical), 2026-05-11: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An…
• CVE-2025-43992 - CVSS 5.6 (medium), 2026-05-11: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data…
• CVE-2026-28261 - CVSS 7.8 (high), 2026-04-08: Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive…
• CVE-2026-22276 - CVSS 5.5 (medium), 2026-01-23: Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Information…
• CVE-2026-22275 - CVSS 4.4 (medium), 2026-01-23: Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information in Source Code…
• CVE-2026-22274 - CVSS 6.5 (medium), 2026-01-23: Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information…
• CVE-2026-22273 - CVSS 8.8 (high), 2026-01-23: Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A…
• CVE-2026-22271 - CVSS 7.5 (high), 2026-01-23: Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information…
• CVE-2025-26476 - CVSS 8.4 (high), 2025-08-04: Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with…
• CVE-2025-30483 - CVSS 5.5 (medium), 2025-07-15: Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged…
• CVE-2025-26478 - CVSS 6.5 (medium), 2025-04-17: Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could…
• CVE-2025-26477 - CVSS 8.8 (high), 2025-04-17: Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit…
• CVE-2024-51540 - CVSS 8.1 (high), 2024-12-26: Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with…
• CVE-2024-52534 - CVSS 5.4 (medium), 2024-12-25: Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access…
• CVE-2024-38485 - CVSS 4.3 (medium), 2024-12-09: Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this…
• CVE-2024-30473 - CVSS 6.5 (medium), 2024-07-18: Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit…
• CVE-2024-22459 - CVSS 6.8 (medium), 2024-02-28: Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote…
• CVE-2023-25934 - CVSS 7.5 (high), 2023-05-04: DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to intercept the…
• CVE-2020-5386 - CVSS 8.1 (high), 2020-09-02: Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory…
• CVE-2020-5317 - CVSS 6.2 (medium), 2020-02-06: Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious…
• CVE-2019-3766 - CVSS 9.8 (critical), 2019-09-27: Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker…
• CVE-2017-8021 - CVSS 9.8 (critical), 2017-10-03: EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to…