GCVE - cpe:2.3:a:emc:data_protection_advisor:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:data_protection_advisor:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Data Protection Advisor (`d9e5ddde-8e2f-5342-99ba-6f6638006a05`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-8003`	vulnerable	2026-06-08 05:10:06.847283	Details available EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized information from the underlying OS server by supplying specially crafted strings in input parameters of the application. Published: 2017-07-09T20:00:00.000Z Updated: 2024-08-05T16:19:29.451Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Jul/12 http://www.securitytracker.com/id/1038841 http://www.securityfocus.com/bid/99487	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8002`	vulnerable	2026-06-08 05:10:06.846743	Details available EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands. Published: 2017-07-09T20:00:00.000Z Updated: 2024-08-05T16:19:29.629Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Jul/12 http://www.securitytracker.com/id/1038841 http://www.securityfocus.com/bid/99487	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1742`	vulnerable	2026-06-08 04:58:01.813613	Details available EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file. Published: 2011-08-01T19:00:00.000Z Updated: 2024-08-06T22:37:25.707Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/519012/100/0/threaded http://securityreason.com/securityalert/8318	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.