Skip to main content

Powerprotect Data Domain Management Center

8 CVEs product

Monthly

CVE-2023-48668 Dec 14, 16:15 MEDIUM This Month

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain Management Center
NVD
CVSS 3.1
6.7
EPSS
0.5%
CVE-2023-48667 Dec 14, 16:15 HIGH This Week

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain Emc Data Domain Os Powerprotect Data Protection +2
NVD
CVSS 3.1
7.2
EPSS
1.8%
CVE-2023-44286 Dec 14, 16:15 MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Information Disclosure Dell Powerprotect Data Domain Emc Data Domain Os +3
NVD
CVSS 3.1
6.1
EPSS
0.8%
CVE-2023-44285 Dec 14, 16:15 HIGH This Week

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Dell Powerprotect Data Domain Emc Data Domain Os Powerprotect Data Protection +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-44284 Dec 14, 16:15 MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Dell Powerprotect Data Domain Emc Data Domain Os Powerprotect Data Protection +2
NVD
CVSS 3.1
4.3
EPSS
0.6%
CVE-2023-44279 Dec 14, 16:15 MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain Emc Data Domain Os Powerprotect Data Protection +2
NVD
CVSS 3.1
6.7
EPSS
0.6%
CVE-2023-44278 Dec 14, 16:15 MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Path Traversal Dell Powerprotect Data Domain Emc Data Domain Os Powerprotect Data Protection +2
NVD
CVSS 3.1
6.7
EPSS
0.3%
CVE-2023-44277 Dec 14, 15:15 HIGH This Week

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain Emc Data Domain Os Powerprotect Data Protection +2
NVD
CVSS 3.1
7.8
EPSS
0.6%
EPSS 0% CVSS 6.7
MEDIUM This Month

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain Management Center
NVD
EPSS 2% CVSS 7.2
HIGH This Week

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain +4
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Information Disclosure Dell +5
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Dell Powerprotect Data Domain +4
NVD
EPSS 1% CVSS 4.3
MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Dell Powerprotect Data Domain +4
NVD
EPSS 1% CVSS 6.7
MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain +4
NVD
EPSS 0% CVSS 6.7
MEDIUM This Month

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Path Traversal Dell Powerprotect Data Domain +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Dell Powerprotect Data Domain +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy