Dell EMC Data Protection Advisor 6.3
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:emc_data_protection_advisor:6.3:*:*:*:*:*:*:*
part: a version: 6.3 update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Emc Data Protection Advisor (d62d0160-1e2d-59a7-92c5-cbc05701463f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-18582 |
vulnerable | 2026-06-08 05:13:11.667503 |
Details available
CRITICAL (9.1)
Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to inject malicious report generation scripts in the server. This may lead to OS command execution as the regular user runs the DPA service on the affected system.
Published: 2020-03-18T18:20:15.872Z
Updated: 2024-09-17T03:58:36.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18581 |
vulnerable | 2026-06-08 05:13:11.658995 |
Details available
CRITICAL (9.1)
Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to alter the application’s allowable list of OS commands. This may lead to arbitrary OS command execution as the regular user runs the DPA service on the affected system.
Published: 2020-03-18T18:20:15.481Z
Updated: 2024-09-16T23:01:47.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11048 |
vulnerable | 2026-06-08 05:10:37.725306 |
Details available
Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to read certain system files in the server or cause denial of service by supplying specially crafted Document Type Definitions (DTDs) in an XML request.
Published: 2018-08-10T20:00:00.000Z
Updated: 2024-09-17T01:56:30.207Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.