Emc Data Protection Advisor vulnerabilities

9 CVEs affecting Emc Data Protection Advisor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8013, published 2018-03-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0406, published 2012-04-20. High severity, CVSS 7.8. EPSS: 8.6% chance of exploitation in the next 30 days. The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and…
CVE-2017-10955, published 2017-10-19. High severity, CVSS 8.8. EPSS: 6.7% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The…
CVE-2012-0407, published 2012-04-20. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value…
CVE-2017-8003, published 2017-07-09. Medium severity, CVSS 4.9. EPSS: 2.6% chance of exploitation in the next 30 days. EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized…
CVE-2017-8002, published 2017-07-09. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about…
CVE-2017-8013, published 2018-03-16. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System…
CVE-2012-4616, published 2012-12-26. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via…
CVE-2018-1206, published 2018-03-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative…
CVE-2011-1742, published 2011-08-01. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information…