What’s Vulnerable › Products

Dell EMC iDRAC vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Dell EMC iDRAC version is affected

Latest Dell EMC iDRAC vulnerabilities

• CVE-2025-22397 — (CVSS 4.9)
• CVE-2025-26482 — (CVSS 4.9)
• CVE-2022-34435 — (CVSS 4.9)
• CVE-2021-21538 — (CVSS 10.0)
• CVE-2021-21544 — (CVSS 2.7)
• CVE-2021-21543 — (CVSS 4.8)
• CVE-2021-21542 — (CVSS 4.8)
• CVE-2021-21541 — (CVSS 6.1)
• CVE-2021-21540 — (CVSS 8.1)
• CVE-2021-21539 — (CVSS 7.1)
• CVE-2020-26198 — (CVSS 6.1)
• CVE-2020-5366 — (CVSS 6.5)
• CVE-2020-5344 — (CVSS 9.8)
• CVE-2019-3764 — (CVSS 4.3)
• CVE-2019-3707 — WS-MAN Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2019-3706 — Web Interface Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2019-3705 — Buffer Overflow Vulnerability (CVSS 9.8)
• CVE-2018-15774 — iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability (CVSS 8.8)
• CVE-2018-1249 — iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs (CVSS 5.9)
• CVE-2018-1244 — iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent. (CVSS 8.8)
• CVE-2018-1243 — iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability (CVSS 7.5)