Advisoriesby IbisDell TechnologiesCVE-2026-56690
Dell Technologies PowerFlex Manager: SQL injection
Fix: upgrade to 5.1.0.1 or later or later (2 fixed versions below)
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information exposure, and Unauthorized access.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| PowerFlex Manager Product | < 5.1.0.1 or later | 5.1.0.1 or later |
| < 4.5.5.2 or later | 4.5.5.2 or later |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-89