Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Advisory: Dell PowerProtect DD — dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-te… Clear all filters
TI-2024-24668 CVE-2024-37141 · GHSA-jx4w-2gqj-27r4

Open redirect in Dell PowerProtect DD

Priority LOW 17

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an open redirect vulnerability.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00298 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-601
TI-2024-24667 CVE-2024-37140 · GHSA-59hv-9255-jc7h

OS command injection in Dell PowerProtect DD

Priority MEDIUM 42

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection vulnerability in an admin operation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01218 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-78
TI-2024-24665 CVE-2024-37138 · GHSA-9rxx-ff39-wwfv

Path traversal in Dell PowerProtect DD

Priority LOW 30

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00401 Published 2024-06-26 No fix listed CWE-23
TI-2024-19344 CVE-2024-29175 · GHSA-j72h-72jr-j8pr

Broken or risky cryptographic algorithm in Dell PowerProtect DD

Priority LOW 28

Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerability.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0026 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-327
TI-2024-19343 CVE-2024-29174 · GHSA-57qf-5gg6-9g3g

SQL injection in Dell PowerProtect DD

Priority LOW 20

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00199 Published 2024-06-26 No fix listed CWE-89
TI-2024-19342 CVE-2024-29173 · GHSA-m882-mjcv-h646

Server-side request forgery in Dell PowerProtect DD

Priority LOW 30

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00349 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-918
TI-2024-19346 CVE-2024-29177 · GHSA-g4vq-69fj-97qw

Sensitive information in log files in Dell PowerProtect DD

Priority LOW 13

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00296 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-532
TI-2024-19345 CVE-2024-29176 · GHSA-vx2h-xx2h-2744

Out-of-bounds write in Dell PowerProtect DD

Priority MEDIUM 41

Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00642 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-787
TI-2024-19164 CVE-2024-28973 · GHSA-rjv4-w97f-h7vm

Cross-site scripting in Dell PowerProtect DD

Priority LOW 26

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00242 Published 2024-06-26 Fixed in 2.7.7, 5.16.0.0 CWE-79