Dell Emc Data Protection Advisor vulnerabilities

7 CVEs affecting Dell Emc Data Protection Advisor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33935, published 2022-08-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18582, published 2020-03-18. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A…
CVE-2019-18581, published 2020-03-18. High severity, CVSS 7.2. EPSS: 3.9% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A…
CVE-2016-8211, published 2017-02-03. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a…
CVE-2020-5352, published 2020-07-06. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on…
CVE-2018-11048, published 2018-08-10. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in…
CVE-2020-5351, published 2021-07-28. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious…
CVE-2022-33935, published 2022-08-30. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML…