Powerprotect Data Domain
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:powerprotect_data_domain:*:*:*:*:lts:*:*:*
part: a version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Powerprotect Data Domain (6b7e75fa-bdac-515e-92a4-20e24cd5de6d) |
| Edition | * |
| Language | * |
| Software edition | lts |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-28263 |
vulnerable | 2026-06-08 07:55:15.081517 |
Details available
MEDIUM (5.9)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a cross-site Scripting vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Published: 2026-04-17T11:44:12.943Z
Updated: 2026-04-18T02:57:02.616Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23777 |
vulnerable | 2026-06-08 07:51:16.245623 |
Details available
MEDIUM (4.3)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Published: 2026-04-17T11:52:13.427Z
Updated: 2026-04-17T13:14:12.461Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29987 |
vulnerable | 2026-06-08 07:14:57.257213 |
Details available
HIGH (8.8)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges.
Published: 2025-04-03T15:18:06.144Z
Updated: 2026-02-26T18:28:57.797Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.