PowerProtect Data Manager vulnerabilities
16 known vulnerabilities in PowerProtect Data Manager from Dell. 16 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
PowerProtect Data Manager: Stack-based Buffer Overflow
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
- 8.8 High severity
PowerProtect Data Manager: Generation of Incorrect Security Tokens
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privil
- 7.2 High severity
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input…
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 7.2 High severity
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input…
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- 7.2 High severity
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input…
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 7.2 High severity
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input…
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 8.8 High severity
PowerProtect Data Manager: Incorrect Privilege Assignment
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 8.8 High severity
PowerProtect Data Manager: Improper Neutralization of Expression/Command Delimiters
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leadi
- 7.8 High severity
PowerProtect Data Manager: Insertion of Sensitive Information into Log File
Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized
- 7.8 High severity
PowerProtect Data Manager: Incorrect Default Permissions
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 7.8 High severity
PowerProtect Data Manager: Improper Neutralization of Special Elements used in an OS Command
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit th
- 7.8 High severity
PowerProtect Data Manager: Incorrect Default Permissions
Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code executio
- 7.8 High severity
PowerProtect Data Manager: Incorrect Use of Privileged APIs
Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 8.8 High severity
PowerProtect Data Manager: Weak Password Recovery Mechanism for Forgotten Password
Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to the applicat
- 7.2 High severity
PowerProtect Data Manager: Improper Neutralization of Special Elements used in an OS Command
Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the applicatio
- 8.8 High severity
PPDM Reporting (PowerProtect Data Manager): Incorrect Use of Privileged APIs
Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to bypass intended access restrictions and perform unauthorized