Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Powerprotect Data Domain Management Center · all components

TI-2023-23808 CVE-2023-44286 · GHSA-wmg9-2c2g-wc3x

Cross-site scripting in Dell PowerProtect DD

Priority LOW 39

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00757 Published 2023-12-14 No fix listed CWE-79
TI-2023-26514 CVE-2023-48668 · GHSA-354w-98cq-w4fj

OS command injection in Dell PowerProtect DD

Priority LOW 36

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00463 Published 2023-12-14 No fix listed CWE-78
TI-2023-26513 CVE-2023-48667 · GHSA-wr5w-23w5-xf72

OS command injection in Dell PowerProtect DD

Priority LOW 35

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01778 Published 2023-12-14 No fix listed CWE-78
TI-2023-23800 CVE-2023-44277 · GHSA-fjw6-6rwx-mp6r

OS command injection in Dell PowerProtect DD

Priority LOW 35

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.006 Published 2023-12-14 No fix listed CWE-78
TI-2023-23802 CVE-2023-44279 · GHSA-jfr7-cv25-964g

OS command injection in Dell PowerProtect DD

Priority LOW 33

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00616 Published 2023-12-14 No fix listed CWE-78
TI-2023-23801 CVE-2023-44278 · GHSA-9gm2-f3j7-6vj6

Path traversal in Dell PowerProtect DD

Priority LOW 29

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00285 Published 2023-12-14 No fix listed CWE-22
TI-2023-23806 CVE-2023-44284 · GHSA-jrpf-6vp7-r4m2

SQL injection in Dell PowerProtect DD

Priority LOW 21

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00569 Published 2023-12-14 No fix listed CWE-89
Open these records in search →