Approved changes feed: RSS · Atom

cpe:2.3:a:dell:powerprotect_cyber_recovery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductPowerprotect Cyber Recovery (4102a1ff-88fd-54d4-981f-9190b7c7e82f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26335 vulnerable 2026-06-08 07:12:51.544905 Details available
MEDIUM (5.8)
Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2025-04-11T01:20:28.507Z
Updated: 2025-04-11T16:02:52.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32465 vulnerable 2026-06-08 06:04:46.246636 Details available
HIGH (8.8)
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker.
Published: 2023-06-14T13:41:10.622Z
Updated: 2024-12-30T15:41:20.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34372 vulnerable 2026-06-08 05:44:52.718934 Details available
CRITICAL (9.8)
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
Published: 2022-09-01T18:45:17.278Z
Updated: 2024-09-17T01:41:50.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32481 vulnerable 2026-06-08 05:44:43.374306 Details available
HIGH (7.8)
Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover.
Published: 2022-07-07T22:05:11.954Z
Updated: 2024-09-17T04:10:02.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.