CVE-2020-5356: Dell Powerprotect Data Manager

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

Affected products

• Dell Powerprotect Data Manager: before 19.4 (fixed in 19.4)
• Dell Powerprotect x400 Firmware: before 3.2 (fixed in 3.2)

Published 2020-07-06. Last modified 2026-06-17.