CVE-2022-31228

Dell EMC XtremIO X2 versions prior to 6.4.0-22 are affected by a brute-force/authentication limitation vulnerability. An unauthenticated, remote attacker can potentially exploit this to gain access to an administrator account. The issue is due to insufficient limits on authentication attempts. Im...

Cloud Mobility for Dell EMC Storage 安全漏洞

Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...

PT-2022-5115 · Dell Emc · Dell Emc Xtremio

Name of the Vulnerable Software and Affected Versions: Dell EMC XtremIO versions prior to X2 6.4.0-22 Description: The issue is related to insufficient authentication attempt limitation, allowing a remote unauthenticated attacker to potentially exploit it and gain access to an admin account throu...

The vulnerability of the Dell EMC CloudLink software, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Dell EMC CloudLink software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device...

EMC Data Protection Advisor < 19.7 Build B4 XSS (DSA-2022-107)

According to its self-reported version, the application is below version 19.7 Build B4. It is, therefore, affected by a stored cross-site scripting vulnerability. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context ...

Dell EMC NetWorker Privilege Escalation (DSA-2022-194)

The version of Dell EMC NetWorker installed on the remote Windows host is 19.2.1.x, 19.3.x, 19.4.x 19.5.x 19.6.x prior to 19.6.1.2 or 19.7.0.0. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, non-administrative attacker can exploit this vulnerability to gain...

CVE-2022-34379

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

Authentication flaw

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

CVE-2022-34379

Dell EMC CloudLink, versions prior to and including 7.1.2, exposes an Authentication Bypass vulnerability. The root cause is weaknesses in the authentication procedure allowing a remote attacker who knows AD usernames to gain unauthorized access. Impact: unauthorized system access (high/C confide...

CVE-2022-34379

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2022-34368

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources...

CVE-2022-34368

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources...

Cross site scripting

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

Design/Logic Flaw

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources...

CVE-2022-34368

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources...

CVE-2022-34368

Dell EMC NetWorker (Windows) prior to patch levels 19.6.1.2 or 19.7.0.0 is affected by CVE-2022-34368 for an improper handling of insufficient permissions, enabling an authenticated non-admin user to access restricted resources. Affected versions include 19.2.1.x through 19.7.0.0. Remediation: up...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2022-33935

Summary: CVE-2022-33935 affects Dell EMC Data Protection Advisor versions 19.6 and earlier and is a stored cross-site scripting (XSS) vulnerability in the web data store component. An attacker could cause the browser to execute malicious HTML/JavaScript in the context of the vulnerable web applic...

PT-2022-21923 · Dell Emc · Dell Emc Data Protection Advisor

Name of the Vulnerable Software and Affected Versions: Dell EMC Data Protection Advisor versions 19.6 and earlier Description: The issue is a Stored Cross Site Scripting, where an attacker could potentially exploit this to store malicious HTML or JavaScript codes in a trusted application data...