Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 39

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04573 Published 2020-03-18 Fixed in 6.3, 6.4 +1 CWE-94
Priority LOW 38

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03919 Published 2020-03-18 Fixed in 6.3, 6.4 +1 CWE-862