Vulnerabilities

TI-2023-23822 CVE-2023-44302 · GHSA-9j3m-h27q-hv35

Improper authentication in Dell PowerProtect Data Manager DM5500 Appliance

MEDIUM 44

Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01117 Published 2023-12-04 No fix listed CWE-287

TI-2023-23821 CVE-2023-44301 · GHSA-4jpw-w2c8-hq6f

LOW 25

Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00477 Published 2023-12-04 No fix listed CWE-79

TI-2023-23820 CVE-2023-44300 · GHSA-mr63-x9hg-pvgj

LOW 24

Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00189 Published 2023-12-04 No fix listed CWE-256

TI-2023-23826 CVE-2023-44306 · GHSA-wq6c-hm2f-chjh

LOW 31

Dell DM5500 contains a path traversal vulnerability in the appliance.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00928 Published 2023-12-04 No fix listed CWE-22

TI-2023-23825 CVE-2023-44305 · GHSA-778h-5qwc-w6fw

MEDIUM 44

Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2023-12-04 No fix listed CWE-121

TI-2023-23824 CVE-2023-44304 · GHSA-6r2j-jrx3-5vmx

MEDIUM 42

Dell DM5500 contains a privilege escalation vulnerability in the appliance.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00968 Published 2023-12-04 No fix listed CWE-78

TI-2023-23812 CVE-2023-44291 · GHSA-gf6r-2pjx-7jxv

LOW 35

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01589 Published 2023-12-04 No fix listed CWE-78