Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2025-43937

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low…

Medium6.6EPSS 0.14%
Published
Updated
Reserved
Assigned by
dell

Description

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Scores

CVSS scores of CVE-2025-43937, by who scored it
Scored byCVSSScoreVector
dellCNA (assigner)3.1Medium6.6CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
NVDNVD · Analyzed3.1Medium6.6CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
EPSS (exploitation in 30 days)
0.14% · top 97% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.6.

Weakness

Affected products

  • Dell · PowerScale OneFS

    • affected 9.5.0.0 – < 9.10.1.3
    • affected < 9.12.0.0
    • affected 9.7.0.0 – < 9.7.1.9
    • affected 9.5.0.0 – < 9.5.1.5

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2025-43937 badge
[![CVE-2025-43937](https://trackcve.app/badge/CVE-2025-43937.svg)](https://trackcve.app/cve/CVE-2025-43937)

Record last updated .