Dell Powerprotect Data Domain Management Center vulnerabilities

8 CVEs affecting Dell Powerprotect Data Domain Management Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-48668, published 2023-12-14.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-48667, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could…
• CVE-2023-44286, published 2023-12-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially…
• CVE-2023-44279, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could…
• CVE-2023-44277, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially…
• CVE-2023-44284, published 2023-12-14. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this…
• CVE-2023-48668, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged…
• CVE-2023-44278, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this…
• CVE-2023-44285, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could…