The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to perform cross-site scripting attacks.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

EUVD-2016-9064

Malware in sbrugna...

PT-2017-16245

Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.2 through 5.7 before 5.7.3.0 EMC Data Domain OS versions 6.0 before 6.0.1.0 Description A privilege escalation issue affects the system, potentially allowing attackers to compromise it. Recommendations For version...

CVE-2017-4983: Undefined Security Weakness

EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system...

Command injection

EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...

CVE-2016-8216

EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...

CVE-2016-8216

EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...

PT-2017-9535

Name of the Vulnerable Software and Affected Versions EMC Data Domain OS DD OS versions 5.4 EMC Data Domain OS DD OS 5.5 family versions prior to 5.5.5.0 EMC Data Domain OS DD OS 5.6 family versions prior to 5.6.2.0 EMC Data Domain OS DD OS 5.7 family versions prior to 5.7.2.10 Description The...

CVE-2016-8216: Undefined Security Weakness

EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...

EMC Data Domain OS Local Command Injection Vulnerability (ESA-2016-160)

EMC Data Domain OS is prone to a local command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2016-4466

Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.4 through 5.7 before 5.7.2.0 Description The issue allows remote authenticated users to bypass intended password-change restrictions. This can be achieved by leveraging access to a different account with the same...

CVE-2016-0911: Undefined Security Weakness

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default norootsquash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges...

PT-2016-4465

Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.4 through 5.7 before 5.7.2.0 Description The issue makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges due to a default no root squash option for NFS exports...

CVE-2016-0912: Undefined Security Weakness

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...

CVE-2016-0910

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

PT-2016-4464

Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.5 through 5.5.4.0 EMC Data Domain OS versions 5.6 through 5.6.1.004 EMC Data Domain OS versions 5.7 through 5.7.2.0 Description The issue allows local users to hijack arbitrary accounts due to the storage of sessi...

CVE-2016-0910: Undefined Security Weakness

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...