Dell EMC Data Protection Advisor 18.1
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:emc_data_protection_advisor:18.1:*:*:*:*:*:*:*
part: a version: 18.1 update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Emc Data Protection Advisor (d62d0160-1e2d-59a7-92c5-cbc05701463f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5352 |
vulnerable | 2026-06-08 05:26:42.236883 |
Details available
HIGH (8.8)
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system.
Published: 2020-07-06T17:45:17.498Z
Updated: 2024-09-16T23:00:35.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5351 |
vulnerable | 2026-06-08 05:26:42.236285 |
Details available
HIGH (7.5)
Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only privileges.
Published: 2021-07-28T00:05:16.265Z
Updated: 2024-09-17T01:31:23.532Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18582 |
vulnerable | 2026-06-08 05:13:11.667568 |
Details available
CRITICAL (9.1)
Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to inject malicious report generation scripts in the server. This may lead to OS command execution as the regular user runs the DPA service on the affected system.
Published: 2020-03-18T18:20:15.872Z
Updated: 2024-09-17T03:58:36.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18581 |
vulnerable | 2026-06-08 05:13:11.661063 |
Details available
CRITICAL (9.1)
Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to alter the application’s allowable list of OS commands. This may lead to arbitrary OS command execution as the regular user runs the DPA service on the affected system.
Published: 2020-03-18T18:20:15.481Z
Updated: 2024-09-16T23:01:47.466Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.