Marvell vulnerabilities
We track 16 vulnerabilities in Marvell products. 16 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.
Latest Marvell vulnerabilities
- 9.4 Critical severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected ins
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not requir
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit t
- 9.1 Critical severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is n
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not req
- 9.8 Critical severity
QConvergeConsole: Unrestricted Upload of File with Dangerous Type
Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to e
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not re
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not requ
- 9.1 Critical severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to expl
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not requ
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not require
- 7.5 High severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not requi
- 9.8 Critical severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit t
- 9.4 Critical severity
QConvergeConsole: Improper Limitation of a Pathname to a Restricted Directory
Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations