Dell Powerprotect Data Domain vulnerabilities

10 CVEs affecting Dell Powerprotect Data Domain, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-28263, published 2026-04-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-48667, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could…
CVE-2023-44286, published 2023-12-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially…
CVE-2023-44279, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could…
CVE-2023-44277, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially…
CVE-2023-44284, published 2023-12-14. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this…
CVE-2025-29987, published 2025-04-03. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a…
CVE-2026-23777, published 2026-04-17. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions…
CVE-2023-44278, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this…
CVE-2026-28263, published 2026-04-17. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions…
CVE-2023-44285, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could…