Dell Emc Data Protection Central vulnerabilities

5 CVEs affecting Dell Emc Data Protection Central, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-45102, published 2023-02-01.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-43588, published 2022-01-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of…
• CVE-2019-3762, published 2020-03-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this…
• CVE-2021-36349, published 2022-01-24. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this…
• CVE-2022-45102, published 2023-02-01. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by…
• CVE-2022-34367, published 2022-07-21. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery Vulnerability. A(n) remote unauthenticated attacker could potentially exploit…