Evasa Provider Virtual Appliance vulnerabilities

2 known vulnerabilities in Evasa Provider Virtual Appliance from Dell. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Unisphere for PowerMax vApp: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-45104Feb 11, 2023DellEPSS 1.38%

  Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands on t

• 8.0 High severity

  Unisphere for PowerMax: Incorrect Resource Transfer Between Spheres

  CVE-2022-31233Aug 31, 2022Dell

  Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.