Priority LOW 35
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00196 · Published 2026-09-03 · Fixed in 20.3.0.0 CWE-121
Priority LOW 32
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability.
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.00381 · Published 2026-09-03 · Fixed in 20.3.0.0 CWE-188
Priority LOW 29
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00382 · Published 2026-09-03 · Fixed in 20.3.0.0 CWE-863
Priority LOW 19
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API.
CVSS 3.1MEDIUM 4.1· Network · High privileges · No interaction · EPSS 0.00364 · Published 2026-09-03 · Fixed in 20.3.0.0 CWE-918
Priority LOW 35
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00626 · Published 2026-07-22 · Fixed in 20.2.0.0 or later CWE-20
Priority MEDIUM 40
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00417 · Published 2026-07-22 · Fixed in 20.2.0.0 or later CWE-1270
Priority MEDIUM 42
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00499 · Published 2026-07-22 · Fixed in 20.2.0.0 or later CWE-20
Priority MEDIUM 42
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00499 · Published 2026-07-22 · Fixed in 20.2.0.0 or later CWE-20
Priority LOW 34
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00499 · Published 2026-07-22 · Fixed in 20.2.0.0 or later CWE-20
Priority LOW 26
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00154 · Published 2026-07-22 · Fixed in 20.2.0.0 or later CWE-200
Priority LOW 24
Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-04-08 · Fixed in 20.1.0.0 or later CWE-732
Priority MEDIUM 40
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00458 · Published 2026-02-19 · Fixed in 19.22.0-24 or later CWE-266
Priority LOW 28
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00219 · Published 2026-02-19 · Fixed in 19.22.0-24 or later CWE-266
Priority LOW 38
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00309 · Published 2026-02-19 · Fixed in 19.22.0-24 or later CWE-146
Priority LOW 21
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.00201 · Published 2026-02-19 · Fixed in 19.22.0-24 or later CWE-940
Priority LOW 20
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00158 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-35
Priority LOW 22
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password vulnerability.
CVSS 3.1MEDIUM 5.0· Local · High privileges · User interaction · EPSS 0.00112 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-256
Priority LOW 35
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00104 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-276
Priority LOW 35
Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default Permissions vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-276
Priority LOW 37
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00526 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-78
Priority LOW 38
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00462 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-78
Priority LOW 39
Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00146 · Published 2025-09-10 · Fixed in 19.21 build 11 CWE-532
Priority LOW 29
Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerProtect Data Manager.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00416 · Published 2025-07-30 · Fixed in 19.20 CWE-20
Priority LOW 19
Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability.
CVSS 3.1MEDIUM 4.2· Local · High privileges · User interaction · EPSS 0.00153 · Published 2025-04-28 · No fix listed CWE-116
Priority LOW 20
Dell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00168 · Published 2025-04-28 · No fix listed CWE-1336
Load more
THREATIST.IORead the docs