Dell Emc Integrated Data Protection Appliance vulnerabilities

16 CVEs affecting Dell Emc Integrated Data Protection Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21601, published 2021-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1217, published 2018-04-09. Critical severity, CVSS 9.8. EPSS: 50.9% chance of exploitation in the next 30 days. Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check…
CVE-2018-11066, published 2018-11-26. Critical severity, CVSS 9.8. EPSS: 9.9% chance of exploitation in the next 30 days. Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0,…
CVE-2020-29495, published 2021-01-14. Critical severity, CVSS 10.0. EPSS: 6.4% chance of exploitation in the next 30 days. DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability,…
CVE-2020-29493, published 2021-01-14. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading…
CVE-2018-11048, published 2018-08-10. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in…
CVE-2020-5350, published 2020-04-15. High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days. Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root…
CVE-2018-11067, published 2018-11-26. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0,…
CVE-2018-11062, published 2018-11-02. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited…
CVE-2020-29494, published 2021-01-14. High severity, CVSS 8.7. EPSS: 1.7% chance of exploitation in the next 30 days. Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the…
CVE-2019-3765, published 2019-10-09. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission…

Latest

CVE-2021-21601, published 2021-08-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit…
CVE-2019-3752, published 2021-07-16. High severity, CVSS 8.2. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External Entity(XXE)…
CVE-2021-21511, published 2021-02-15. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain…
CVE-2019-3762, published 2020-03-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this…
CVE-2018-11077, published 2018-11-26. Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days. 'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2…