Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Dell PowerProtect Data Manager — dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-securit… Clear all filters
TI-2025-28463 CVE-2025-43886 · GHSA-4mv3-rxrj-2ghr

Path traversal in Dell PowerProtect Data Manager

Priority LOW 20

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00158 Published 2025-09-10 Fixed in 19.21 build 11 CWE-35
TI-2025-28464 CVE-2025-43887 · GHSA-424m-q6qv-vmpp

Incorrect default permissions in Dell PowerProtect Data Manager

Priority LOW 35

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00104 Published 2025-09-10 Fixed in 19.21 build 11 CWE-276
TI-2025-28313 CVE-2025-43725 · GHSA-w4hp-wm49-9jp9

Incorrect default permissions in Dell PowerProtect Data Manager

Priority LOW 35

Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default Permissions vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00132 Published 2025-09-10 Fixed in 19.21 build 11 CWE-276
TI-2025-28462 CVE-2025-43885 · GHSA-vppm-4q5r-2285

OS command injection in Dell PowerProtect Data Manager

Priority LOW 37

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00526 Published 2025-09-10 Fixed in 19.21 build 11 CWE-78
TI-2025-28461 CVE-2025-43884 · GHSA-5f5w-3wh7-wcpv

OS command injection in Dell PowerProtect Data Manager

Priority LOW 38

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00462 Published 2025-09-10 Fixed in 19.21 build 11 CWE-78
TI-2025-28465 CVE-2025-43888 · GHSA-rcwx-27fj-mxf2

Sensitive information in log files in Dell PowerProtect Data Manager

Priority LOW 39

Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00146 Published 2025-09-10 Fixed in 19.21 build 11 CWE-532