CVE-2024-22460

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...

CVE-2024-22460

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...

CVE-2024-22460

CVE-2024-22460 affects Dell PowerProtect DM5500, versions 5.15.0.0 and prior. The vulnerability is an insecure deserialization flaw that could allow a remote attacker with high privileges to execute arbitrary code on the vulnerable appliance. Technical details across connected sources confirm the...

CVE-2024-22460

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...

CVE-2024-24908

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem...

CVE-2024-24908

Dell PowerProtect DM5500 (versions 5.15.0.0 and earlier) is affected by CVE-2024-24908 through a directory/path traversal that can allow a remote attacker with high privileges to delete arbitrary files on the server filesystem. Affected component: file system handling within the DM5500 appliance....

CVE-2024-24908

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem...

Dell DM5500 路径遍历漏洞

Dell PowerProtect DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. A directory traversal vulnerability exists in Dell PowerProtect DM5500 version 5.15.0.0 and prior versions, which can be exploited...

PT-2024-19438 · Dell · Dell Powerprotect Dm5500

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DM5500 versions 5.15.0.0 and prior Description: The issue is related to an insecure deserialization vulnerability. A remote attacker with high privileges could potentially exploit this, leading to arbitrary code execution on...

CVE-2024-22460: Deserialization of Untrusted Data

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...

CVE-2024-24908: Improper Limitation of a Pathname to a Restricted Directory

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem...

PT-2024-20659 · Dell · Dell Powerprotect Dm5500

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DM5500 versions 5.15.0.0 and prior Description: The issue allows a remote attacker with high privileges to potentially exploit an Arbitrary File Delete via Path Traversal vulnerability, leading to the deletion of arbitrary...

The software of the centralized backup and disaster recovery system of Dell PowerProtect Data Manager is vulnerable due to a flaw in the mechanism for recovering forgotten passwords. This vulnerability allows an intruder to gain unauthorized access to the application.

The software of the centralized backup and disaster recovery system Dell PowerProtect Data Manager has a vulnerability due to a flaw in the mechanism for recovering forgotten passwords. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

The software of the centralized backup and disaster recovery system of Dell PowerProtect Data Manager is vulnerable due to the lack of measures to neutralize special elements used in the operating system command set. This vulnerability allows a malicious actor to execute arbitrary commands on the basic operating system.

The software of the centralized backup and disaster recovery system Dell PowerProtect Data Manager is vulnerable because measures are not taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability could allow a malicious actor to execute any...

The software of the centralized backup and disaster recovery management system of Dell PowerProtect Data Manager is vulnerable due to incorrect restrictions on XML references to external objects. This vulnerability allows attackers to gain unauthorized access to confidential data or cause service failures.

The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in improper restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data or cause service failures...

Dell PowerProtect Data Manager XML External Entity Injection Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. Dell PowerProtect Data Manager suffers from an XML external entity injection vulnerability that can be exploited by...

CVE-2024-25971

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to information disclosure, denial-of-service...

CVE-2024-25971

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to information disclosure, denial-of-service...

CVE-2024-25971

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to information disclosure, denial-of-service...

CVE-2024-25971

CVE-2024-25971 affects Dell PowerProtect Data Manager, version 19.15. The issue is an XML External Entity Injection that could be exploited remotely by a high-privilege attacker to cause information disclosure and denial of service. Exploitation details are not provided beyond the vendor/product ...