Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

TI-2023-26513 CVE-2023-48667 · GHSA-wr5w-23w5-xf72

OS command injection in Dell PowerProtect DD

Priority LOW 35

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01778 Published 2023-12-14 No fix listed CWE-78
TI-2023-23808 CVE-2023-44286 · GHSA-wmg9-2c2g-wc3x

Cross-site scripting in Dell PowerProtect DD

Priority LOW 39

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00757 Published 2023-12-14 No fix listed CWE-79
TI-2023-23806 CVE-2023-44284 · GHSA-jrpf-6vp7-r4m2

SQL injection in Dell PowerProtect DD

Priority LOW 21

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00569 Published 2023-12-14 No fix listed CWE-89
TI-2023-23802 CVE-2023-44279 · GHSA-jfr7-cv25-964g

OS command injection in Dell PowerProtect DD

Priority LOW 33

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00616 Published 2023-12-14 No fix listed CWE-78
TI-2023-23801 CVE-2023-44278 · GHSA-9gm2-f3j7-6vj6

Path traversal in Dell PowerProtect DD

Priority LOW 29

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00285 Published 2023-12-14 No fix listed CWE-22
TI-2023-23800 CVE-2023-44277 · GHSA-fjw6-6rwx-mp6r

OS command injection in Dell PowerProtect DD

Priority LOW 35

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.006 Published 2023-12-14 No fix listed CWE-78
TI-2023-09506 CVE-2023-23692 · GHSA-fj98-chjw-h559

OS command injection in Dell Data Domain

Priority MEDIUM 49

Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01569 Published 2023-02-01 Fixed in 6.2.1.80 CWE-78
Priority LOW 31

EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00767 Published 2017-02-03 No fix listed CWE-264
Priority MEDIUM 48

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account o…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03482 Published 2016-06-19 No fix listed CWE-264