TI-2023-09506 CVE-2023-23692 · GHSA-fj98-chjw-h559
OS command injection in Dell Data Domain
Priority MEDIUM 49
Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability.
Dell
Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9
Exploited now
Dell records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Emc Data Domain Os · all components
TI-2016-00821 CVE-2016-0912 · GHSA-62j7-m32f-g9j9
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to…
Priority MEDIUM 48
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account o…
TI-2023-23808 CVE-2023-44286 · GHSA-wmg9-2c2g-wc3x
Cross-site scripting in Dell PowerProtect DD
Priority LOW 39
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability.
TI-2016-00820 CVE-2016-0911 · GHSA-mg76-j42m-6p6f
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for…
Priority LOW 38
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges.
TI-2023-26513 CVE-2023-48667 · GHSA-wr5w-23w5-xf72
OS command injection in Dell PowerProtect DD
Priority LOW 35
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.
TI-2023-23800 CVE-2023-44277 · GHSA-fjw6-6rwx-mp6r
OS command injection in Dell PowerProtect DD
Priority LOW 35
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI.
TI-2023-23807 CVE-2023-44285 · GHSA-qr8x-cpgm-547r
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110…
Priority LOW 33
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability.
TI-2023-23802 CVE-2023-44279 · GHSA-jfr7-cv25-964g
OS command injection in Dell PowerProtect DD
Priority LOW 33
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.
TI-2016-06769 CVE-2016-8216 · GHSA-vj3f-jxv4-qrgv
Access control flaw in EMC Data Domain DD OS EMC Data Domain OS 5.4 all versions, EMC…
Priority LOW 31
EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family…
TI-2017-03107 CVE-2017-4983 · GHSA-6xv8-gj7v-5h3c
EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a…
Priority LOW 30
EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system.
TI-2023-23801 CVE-2023-44278 · GHSA-9gm2-f3j7-6vj6
Path traversal in Dell PowerProtect DD
Priority LOW 29
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability.
TI-2023-23806 CVE-2023-44284 · GHSA-jrpf-6vp7-r4m2
SQL injection in Dell PowerProtect DD
Priority LOW 21
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability.