CVE-2022-45102

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

CVE-2022-45102: Improper Neutralization of HTTP Headers for Scripting Syntax

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

CVE-2022-34367: Cross-Site Request Forgery (CSRF)

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

PT-2022-22147

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.1 through 19.6 Description The issue allows a remote unauthenticated attacker to potentially exploit a Cross-Site Request Forgery vulnerability, leading to the processing of unintended server...

PT-2022-11870

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central version 19.5 Description The issue is related to an Improper Input Validation, which could be exploited by a remote unauthenticated attacker, potentially leading to denial of service. Recommendations For Dell E...

PT-2022-10509

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.5 and prior Description The issue is related to a Server Side Request Forgery vulnerability in the DPC DNS client processing. This could allow a remote malicious user to potentially exploit the...

CVE-2021-43588: Improper Input Validation

Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2021-36349: Server-Side Request Forgery (SSRF)

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts...