CVE-2024-28974

CVE-2024-28974 concerns Dell Data Protection Advisor (DP A) 19.9 with an inadequate encryption strength vulnerability. A low-privileged, remote attacker could exploit this to cause a Denial of Service. Documents consistently identify the affected component as DP A 19.9 and describe the root cause...

CVE-2024-28974: Inadequate Encryption Strength

Dell Data Protection Advisor, versions 19.9, contains an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

EMC Data Protection Advisor < 19.7 Build B4 XSS (DSA-2022-107)

According to its self-reported version, the application is below version 19.7 Build B4. It is, therefore, affected by a stored cross-site scripting vulnerability. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context ...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2022-33935

Summary: CVE-2022-33935 affects Dell EMC Data Protection Advisor versions 19.6 and earlier and is a stored cross-site scripting (XSS) vulnerability in the web data store component. An attacker could cause the browser to execute malicious HTML/JavaScript in the context of the vulnerable web applic...

CVE-2022-33935: Improper Neutralization of Input During Web Page Generation

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

PT-2022-21923 · Dell Emc · Dell Emc Data Protection Advisor

Name of the Vulnerable Software and Affected Versions: Dell EMC Data Protection Advisor versions 19.6 and earlier Description: The issue is a Stored Cross Site Scripting, where an attacker could potentially exploit this to store malicious HTML or JavaScript codes in a trusted application data...

Dell EMC Data Protection Advisor 跨站脚本漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports features such as data backup, data recovery and data replication management. Dell EMC Data Protection Advisor: A cross-site scripting vulnerability exists in versions 19.0 through 19.6,...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

Hardcoded credentials

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

CVE-2020-5351: Use of Hard-coded Password

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

Dell EMC Data Protection Advisor 安全漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery, and data replication management. A security vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1, which arises from the affect...

EMC Data Protection Advisor 6.4 / 6.5 / 18.1 OS Command Injection (DSA-2020-081)

The version of EMC Protection Advisor installed on the remote host is 6.4, 6.5 or 18.1. It is, therefore, affected by an OS command injection vulnerability. An authenticated, remote attacker can exploit this to execute arbitrary commands on the affected system. C Tenable Network Security, Inc...

Dell EMC Data Protection Advisor Operating System Command Injection Vulnerability

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery and data replication management. An operating system command injection vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1. A...

CVE-2020-5352

Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...