Product:

Emc_data_domain_os

(Dell)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 12
Date Id Summary Products Score Patch Annotated
2023-02-01 CVE-2023-23692 Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Emc_data_domain_os 8.8
2023-12-14 CVE-2023-44277 Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 7.8
2023-12-14 CVE-2023-44278 Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application. Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 6.7
2023-12-14 CVE-2023-44279 Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could potentially exploit this vulnerability, to bypass security restrictions. Exploitation may lead to a system take over by an attacker Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 6.7
2023-12-14 CVE-2023-44284 Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized read access to application data. Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 4.3
2023-12-14 CVE-2023-44286 Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the injection of malicious HTML or JavaScript code to a victim user's DOM environment in the browser. . Exploitation may lead to information disclosure, session theft, or client-side request forgery. Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 6.1
2023-12-14 CVE-2023-44285 Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege. Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 7.8
2023-12-14 CVE-2023-48667 Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS to bypass security restriction. Exploitation may lead to a system take over by an attacker. Apex_protection_storage, Emc_data_domain_os, Powerprotect_data_domain, Powerprotect_data_domain_management_center, Powerprotect_data_protection 7.2
2017-05-04 CVE-2017-4983 EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system. Emc_data_domain_os 6.7
2016-06-19 CVE-2016-0912 EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account or (2) an account's session at an unattended workstation. Emc_data_domain_os 9.8