Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

16 records in Emc Integrated Data Protection Appliance · all components

TI-2018-01128 CVE-2018-1217 · GHSA-6583-rv3q-95pf

Missing authorization in Dell EMC Avamar, Integrated Data Protection Appliance

Priority HIGH 73

Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potent…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.50874 Published 2018-04-09 No fix listed CWE-862
TI-2020-17716 CVE-2020-29495 · GHSA-q9fj-r59w-qgwr

Path traversal in Dell Avamar

Priority MEDIUM 52

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.06422 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22
TI-2020-17714 CVE-2020-29493 · GHSA-xmm8-v82g-957c

SQL injection in Dell Avamar

Priority MEDIUM 48

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02724 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-89
TI-2020-17715 CVE-2020-29494 · GHSA-xjxp-x9rc-crcf

Path traversal in Dell Avamar

Priority MEDIUM 41

Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01701 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22
TI-2018-07834 CVE-2018-11048 · GHSA-ww27-qpc9-x958

XML external entity injection in Dell EMC Data Protection Advisor

Priority LOW 39

Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.02064 Published 2018-08-10 No fix listed CWE-611
TI-2021-04681 CVE-2021-21601 · GHSA-h5wg-58jx-9rr7

Sensitive information in log files in Dell Data Protection Search

Priority LOW 38

Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00239 Published 2021-08-10 Fixed in 19.5 CWE-532
TI-2020-04402 CVE-2020-5350 · GHSA-hfm4-3rg3-394f

OS command injection in Dell Integrated Data Protection Appliance

Priority LOW 38

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component.

CVSS 3.1HIGH 7.9 Network High privileges No interaction EPSS 0.01975 Published 2020-04-15 Fixed in 2.0, 2.1 +3 CWE-78
TI-2019-02780 CVE-2019-3765 · GHSA-234q-j3p6-pgvr

Incorrect permission assignment in Dell Avamar

Priority LOW 38

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Reso…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01135 Published 2019-10-09 No fix listed CWE-732
TI-2019-02769 CVE-2019-3752 · GHSA-pg28-353j-pr59

XML external entity injection in Dell Avamar

Priority LOW 38

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00977 Published 2021-07-16 No fix listed CWE-611
TI-2021-04602 CVE-2021-21511 · GHSA-2gr2-xjj5-q4ff

Improper authorization in Dell Avamar

Priority LOW 37

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01043 Published 2021-02-15 No fix listed CWE-285
TI-2018-07863 CVE-2018-11077 · GHSA-53fw-rm7m-jqgv

Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability

Priority LOW 32

'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.01005 Published 2018-11-26 No fix listed CWE-78
TI-2018-07853 CVE-2018-11067 · GHSA-56qv-9p9c-2q4v

Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability

Priority LOW 31

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01811 Published 2018-11-26 No fix listed CWE-601
Open these records in search →