Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

31 records in Powerprotect Data Manager · all components

TI-2026-34362 CVE-2026-46738 · GHSA-p5gf-3w86-63p3

Improper input validation in Dell PowerProtect Data Manager

Priority MEDIUM 42

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00499 Published 2026-07-22 Fixed in 20.2.0.0 or later CWE-20
TI-2026-29383 CVE-2026-40712 · GHSA-3wx7-p748-wxww

Improper input validation in Dell PowerProtect Data Manager

Priority MEDIUM 42

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00499 Published 2026-07-22 Fixed in 20.2.0.0 or later CWE-20
TI-2024-15023 CVE-2024-22454 · GHSA-2mw7-f37q-33mg

Weak password recovery in Dell PowerProtect Data Manager

Priority MEDIUM 41

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0056 Published 2024-02-13 No fix listed CWE-640
TI-2025-28465 CVE-2025-43888 · GHSA-rcwx-27fj-mxf2

Sensitive information in log files in Dell PowerProtect Data Manager

Priority LOW 39

Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00146 Published 2025-09-10 Fixed in 19.21 build 11 CWE-532
TI-2025-28461 CVE-2025-43884 · GHSA-5f5w-3wh7-wcpv

OS command injection in Dell PowerProtect Data Manager

Priority LOW 38

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00462 Published 2025-09-10 Fixed in 19.21 build 11 CWE-78
TI-2025-28462 CVE-2025-43885 · GHSA-vppm-4q5r-2285

OS command injection in Dell PowerProtect Data Manager

Priority LOW 37

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00526 Published 2025-09-10 Fixed in 19.21 build 11 CWE-78
TI-2024-15015 CVE-2024-22445 · GHSA-w598-9rgj-7mq4

OS command injection in Dell PowerProtect Data Manager

Priority LOW 37

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01439 Published 2024-02-13 No fix listed CWE-78
TI-2020-04407 CVE-2020-5356 · GHSA-f5jv-3q57-gqc5

Improper authorization in Dell Power Protect Data Manager

Priority LOW 36

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01273 Published 2020-07-06 Fixed in PowerProtect Data Manager version 19.5 CWE-285
TI-2026-51684 CVE-2026-73600 · GHSA-7fvw-crpq-x82c

Stack-based buffer overflow in Dell PowerProtect Data Manager

Priority LOW 35

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00196 Published 2026-09-03 Fixed in 20.3.0.0 CWE-121
TI-2026-34361 CVE-2026-46737 · GHSA-8j96-7wgg-9348

Improper input validation in Dell PowerProtect Data Manager

Priority LOW 35

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00626 Published 2026-07-22 Fixed in 20.2.0.0 or later CWE-20
TI-2025-28464 CVE-2025-43887 · GHSA-424m-q6qv-vmpp

Incorrect default permissions in Dell PowerProtect Data Manager

Priority LOW 35

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00104 Published 2025-09-10 Fixed in 19.21 build 11 CWE-276
TI-2025-28313 CVE-2025-43725 · GHSA-w4hp-wm49-9jp9

Incorrect default permissions in Dell PowerProtect Data Manager

Priority LOW 35

Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default Permissions vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00132 Published 2025-09-10 Fixed in 19.21 build 11 CWE-276
TI-2026-29385 CVE-2026-40714 · GHSA-468h-f89p-mhw3

Improper input validation in Dell PowerProtect Data Manager

Priority LOW 34

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00499 Published 2026-07-22 Fixed in 20.2.0.0 or later CWE-20
TI-2026-52543 CVE-2026-74769 · GHSA-gvr7-j885-xj8m

Incorrect authorization in Dell PowerProtect Data Manager

Priority LOW 29

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00382 Published 2026-09-03 Fixed in 20.3.0.0 CWE-863
TI-2025-21779 CVE-2025-30480 · GHSA-2g36-rxhf-j6fx

Improper input validation in Dell PowerProtect Data Manager

Priority LOW 29

Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerProtect Data Manager.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00416 Published 2025-07-30 Fixed in 19.20 CWE-20
TI-2026-32248 CVE-2026-44276 · GHSA-97wp-7vj5-mrg2

Information disclosure in Dell PowerProtect Data Manager

Priority LOW 26

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00154 Published 2026-07-22 Fixed in 20.2.0.0 or later CWE-200
TI-2026-22576 CVE-2026-28264 · GHSA-gg8q-457x-wh9p

Incorrect permission assignment in Dell PowerProtect Agent

Priority LOW 24

Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00132 Published 2026-04-08 Fixed in 20.1.0.0 or later CWE-732
Load more
Open these records in search →