Dell Emc Integrated Data Protection Appliance Firmware vulnerabilities

6 CVEs affecting Dell Emc Integrated Data Protection Appliance Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5341, published 2021-07-28.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18582, published 2020-03-18. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A…
• CVE-2020-5341, published 2021-07-28. Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days. Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3,…
• CVE-2019-18581, published 2020-03-18. High severity, CVSS 7.2. EPSS: 3.9% chance of exploitation in the next 30 days. Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A…
• CVE-2019-3746, published 2019-09-27. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to…
• CVE-2019-3747, published 2019-09-27. Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days. Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability…
• CVE-2019-3736, published 2019-09-27. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may…