CVE-2025-27686 CVSS:2.7

Dell Unisphere for PowerMax and PowerMax versions before 10.2.0.9 and 9.2.4.15 have a serious security weakness in their LDAP query handling. This vulnerability allows a high-privileged remote attacker to potentially perform script injection by improperly neutralizing special elements in an LDAP query. The flaw could enable an attacker to manipulate LDAP queries in a way that compromises the system's security, potentially granting unauthorized access or executing malicious scripts.

CVE-2025-29988 CVSS:6.9

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.