CVE-2025-36589: XEE
Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36589?
CVE-2025-36589 is classified as a low severity vulnerability.
How do I fix CVE-2025-36589?
To fix CVE-2025-36589, users should upgrade to the latest version of Dell Unisphere for PowerMax that addresses the vulnerability.
Who is affected by CVE-2025-36589?
CVE-2025-36589 affects users of Dell Unisphere for PowerMax version 9.2.4.x.
What type of vulnerability is CVE-2025-36589?
CVE-2025-36589 is an Improper Restriction of XML External Entity Reference vulnerability.
What could an attacker achieve by exploiting CVE-2025-36589?
Exploiting CVE-2025-36589 could allow a low privileged attacker with remote access to gain unauthorized access to data and resources.