Total
31 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-40714 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 7.2 HIGH |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-44276 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 6.0 MEDIUM |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. | |||||
| CVE-2026-49499 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 8.8 HIGH |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-40712 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 9.1 CRITICAL |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-46737 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 6.7 MEDIUM |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution. | |||||
| CVE-2026-46738 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 9.1 CRITICAL |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-74768 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-14 | N/A | 4.1 MEDIUM |
| Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-73600 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-14 | N/A | 7.8 HIGH |
| Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-68860 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-14 | N/A | 6.8 MEDIUM |
| Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks. | |||||
| CVE-2026-74769 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-14 | N/A | 6.5 MEDIUM |
| Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass. | |||||
| CVE-2026-28264 | 1 Dell | 1 Powerprotect Data Manager | 2026-07-24 | N/A | 3.3 LOW |
| Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. | |||||
| CVE-2026-22269 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 4.7 MEDIUM |
| Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass. | |||||
| CVE-2026-22268 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 6.3 MEDIUM |
| Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service of a Dell Enterprise Support connection. | |||||
| CVE-2026-22267 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 8.1 HIGH |
| Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-22266 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 4.7 MEDIUM |
| Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass. | |||||
| CVE-2025-43938 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 5.0 MEDIUM |
| Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to gain unauthorized access with privileges of the compromised account. | |||||
| CVE-2025-43888 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 8.8 HIGH |
| Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access. | |||||
| CVE-2025-43887 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 7.0 HIGH |
| Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2025-43886 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 4.4 MEDIUM |
| Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker. | |||||
| CVE-2025-43885 | 1 Dell | 1 Powerprotect Data Manager | 2026-06-17 | N/A | 7.8 HIGH |
| Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. | |||||