CVE-2024-29173

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery SSRF vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to disclosure of information on the application or remote client...

CVE-2024-29173

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery SSRF vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to disclosure of information on the application or remote client...

CVE-2024-29173

Dell PowerProtect DD (before 8.0 and the listed LTS branches: 7.13.1.0, 7.10.1.30, 7.7.5.40) contains a Server-Side Request Forgery (SSRF) vulnerability. A remote, high-privilege attacker could potentially disclose information on the application or remote client. The provided documents confirm th...

CVE-2024-29177

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the reuse of disclosed information to gain...

CVE-2024-29177

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the reuse of disclosed information to gain...

CVE-2024-29177

CVE-2024-29177 affects Dell PowerProtect DD prior to 8.0 and the LTS branches 7.13.1.0, 7.10.1.30, and 7.7.5.40. The issue is described as a disclosure of temporary sensitive information that could be exploited by a remote high-privilege attacker to reuse disclosed data to gain unauthorized acces...

CVE-2024-29176

Dell PowerProtect DD, versions 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contains an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-29176

Dell PowerProtect DD, versions 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contains an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-29176

CVE-2024-29176 affects Dell PowerProtect DD prior to a fixed release. Dell PowerProtect DD versions 8.0, 7.13.1.0, 7.10.1.30, and 7.7.5.40 are vulnerable to an Out-of-bounds Write that could enable code execution by a low-privilege, remote attacker. The issue is caused by an out-of-bounds write i...

CVE-2024-28973

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted...

CVE-2024-28973

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted...

CVE-2024-28973

Technical details beyond the generic description are not provided in the supplied documents. Monitor for updates from Dell and CVE List references.

Dell PowerProtect Data Domain Cross-Site Scripting Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A cross-site scripting vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to inject malicious HTML or JavaScript code...

PT-2024-22780 · Dell · Dell Data Domain

Name of the Vulnerable Software and Affected Versions: Dell Data Domain versions prior to 7.13.0.0 Dell Data Domain LTS 7.7.5.30 Dell Data Domain LTS 7.10.1.20 Description: The issue allows a local low privileged attacker to potentially exploit an SQL Injection vulnerability, leading to the...

PT-2024-6025 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue is related to the use of default cryptographic keys in the Dell BIOS, which could allow a high-privileged attacker with local access to bypass Secure Boot and...

Dell PowerProtect Data Domain Server-Side Request Forgery Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A server-side request forgery vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause information disclosure in an...

PT-2024-27331 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40 Description: The issue is an open redirect vulnerability that could be exploited by a remote low...

PT-2024-27330 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40 Description: The issue is an OS command injection vulnerability in an admin operation. A remote...

Unspecified Vulnerability in Dell PowerEdge Server BIOS (CNVD-2024-29653)

Dell PowerEdge Server BIOS is a system update driver from Dell USA. A security vulnerability exists in the Dell PowerEdge Server BIOS, which originated when the server BIOS contained a TOCTOU Competitive Condition vulnerability that could be exploited by an attacker to gain access to unauthorized...

Dell PowerProtect Data Domain Open Redirection Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. An open redirection vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to obtain sensitive information...