CVE-2025-29987

Dell PowerProtect Data Domain with DD OS prior to 8.3.0.15 is affected by an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could execute arbitrary commands with root privileges due to limited access-control granularity. The PT-2025-14...

CVE-2023-44286

Dell PowerProtect DD is affected by a DOM-based Cross-Site Scripting vulnerability (CVE-2023-44286) in multiple versions: pre-7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110. The root cause is a DOM-based XSS that allows a remote unauthenticated attacker to inject malicious HTML/JavaScript ...

CVE-2023-44285

Dell PowerProtect DD is affected by an improper access control vulnerability that enables local privilege escalation by a low-privilege user. Affected software includes PowerProtect DD versions prior to 7.13.0.10, LTS releases prior to 7.7.5.25 and 7.10.1.15, and the 6.2.1.110 baseline. The issue...

CVE-2023-44277

Dell PowerProtect DD contains an OS command injection vulnerability in the CLI. A local, low-privileged attacker could execute arbitrary OS commands on the underlying OS with the vulnerable service’s privileges, potentially leading to a full system takeover. Affected versions include prior to 7.1...

CVE-2023-44279

Dell PowerProtect DD is affected by an OS command injection in the administrator CLI. The vulnerability impacts DD versions prior to 7.13.0.10, LTS versions prior to 7.7.5.25 and 7.10.1.15, and version 6.2.1.110. The underlying issue is the failure to properly filter construct command characters,...

CVE-2023-44284

Dell PowerProtect DD is affected by an SQL injection in versions prior to 7.13.0.10, with LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110 also impacted. The issue allows a remote, low-privilege attacker to cause the execution of SQL commands on the backend database, resulting in unauthorized read acce...

CVE-2023-48667

Dell PowerProtect DD is affected by an OS command injection vulnerability in the administrator CLI. A remote high-privilege attacker could execute arbitrary OS commands on the underlying OS, potentially taking over the system. Affected versions include pre-7.13.0.10, LTS pre-7.7.5.25, LTS pre-7.1...

CVE-2023-44278

Dell PowerProtect DD is affected by a path traversal vulnerability (CVE-2023-44278) affecting versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110. The root cause is a path traversal flaw that could allow a local, highly privileged attacker to read and write OS files on the ser...

CVE-2026-23777

Dell PowerProtect Data Domain running DD OS Feature Release 7.7.1.0–8.5, LTS2025 8.3.1.0–8.3.1.20, LTS2024 7.13.1.0–7.13.1.50 has an information exposure vulnerability. A low-privileged attacker with remote access could potentially exploit this to access sensitive data. The CVSS 3.1 base score is...

CVE-2026-28263

CVE-2026-28263 affects Dell PowerProtect Data Domain running DD OS Feature Release 7.7.1.0–8.5, LTS2025 8.3.1.0–8.3.1.20, and LTS2024 7.13.1.0–7.13.1.50. It describes a cross-site scripting vulnerability that could be exploited by a high-privilege attacker with remote access, leading to script in...