Dell Powerprotect Data Protection vulnerabilities

7 CVEs affecting Dell Powerprotect Data Protection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-48667, published 2023-12-14.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-48667, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could…
• CVE-2023-44286, published 2023-12-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially…
• CVE-2023-44279, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could…
• CVE-2023-44277, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially…
• CVE-2023-44284, published 2023-12-14. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this…
• CVE-2023-44278, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this…
• CVE-2023-44285, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could…