TI-2022-15267 Aliases CVE-2022-34367 GHSA-w26q-54h4-q58c

Cross-site request forgery in Dell Data Protection Central

LOW 38CWE-352Published 2022-07-20 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Tampering
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery Vulnerability. A(n) remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations.

Why it matters now

EPSS 0.00363 30th percentileScored 2026-11-07

Fix Fixed Data Protection Central (Dell): 19.7

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dell	Data Protection Central	before 19.7	19.7	Patch available	CNA

Data Protection Central VendorDell Affected before 19.7 Fixed in 19.7 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:dell:emc_data_protection_central::::::::	19.1 to before 19.7	Vulnerable	Dell

cpe:2.3:a:dell:emc_data_protection_central:*:*:*:*:*:*:*:* Versions 19.1 to before 19.7 Vulnerable ·Dell

Remediation

Fix · CNA Data Protection Central (Dell) Fixed in 19.7

Timeline

2026-10-02 Threatist record created from CVE-2022-34367
2026-10-03 Alias added: GHSA-w26q-54h4-q58c

References

Advisory 1

https://www.dell.com/support/kbdoc/en-us/000201505/dsa-2022-192-dell-emc-data-protection-central-security-update-for-multiple-vulnerabilities

TI-2021-19473 Improper input validation in Dell Data Protection Central CVSS 3.1HIGH 7.5
TI-2019-02777 Improper certificate validation in Dell Data Protection Central CVSS 3.1HIGH 7.5
TI-2022-22191 Improper output encoding in Dell Data Protection Central CVSS 3.1MEDIUM 6.1
TI-2021-14710 Server-side request forgery in Dell Data Protection Central CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences