Powerprotect Data Manager (Dell) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2026-09-03. Vendor: Dell.

CVEs of Powerprotect Data Manager

CVE-2026-73600 - CVSS 7.8 (high), 2026-09-03: Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged…
CVE-2026-68860 - CVSS 6.8 (medium), 2026-09-03: Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could…
CVE-2026-74769 - CVSS 6.5 (medium), 2026-09-03: Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote…
CVE-2026-74768 - CVSS 4.1 (medium), 2026-09-03: Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged…
CVE-2026-46737 - CVSS 7.2 (high), 2026-07-22: Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker…
CVE-2026-49499 - CVSS 8.8 (high), 2026-07-22: Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged…
CVE-2026-46738 - CVSS 9.1 (critical), 2026-07-22: Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker…
CVE-2026-40712 - CVSS 9.1 (critical), 2026-07-22: Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker…
CVE-2026-40714 - CVSS 7.2 (high), 2026-07-22: Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote…
CVE-2026-44276 - CVSS 6 (medium), 2026-07-22: Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST…
CVE-2026-28264 - CVSS 5.5 (medium), 2026-04-08: Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged…
CVE-2026-22266 - CVSS 8.8 (high), 2026-02-19: Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST…
CVE-2026-22268 - CVSS 6.5 (medium), 2026-02-19: Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote…
CVE-2026-22267 - CVSS 8.8 (high), 2026-02-19: Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote…
CVE-2026-22269 - CVSS 4.7 (medium), 2026-02-19: Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST…
CVE-2025-43938 - CVSS 5 (medium), 2025-09-10: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker…
CVE-2025-43888 - CVSS 8.8 (high), 2025-09-10: Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low…
CVE-2025-43884 - CVSS 8.2 (high), 2025-09-10: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS…
CVE-2025-43887 - CVSS 7.8 (high), 2025-09-10: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability. A low privileged attacker with…
CVE-2025-43886 - CVSS 4.4 (medium), 2025-09-10: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privileged attacker with…
CVE-2025-43885 - CVSS 7.8 (high), 2025-09-10: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS…
CVE-2025-43725 - CVSS 7.8 (high), 2025-09-10: Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default Permissions vulnerability. A low…
CVE-2025-30480 - CVSS 6.5 (medium), 2025-07-30: Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerProtect Data Manager. A low privileged…
CVE-2025-23377 - CVSS 4.2 (medium), 2025-04-28: Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged…
CVE-2025-23376 - CVSS 4.4 (medium), 2025-04-28: Dell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine…
CVE-2025-23375 - CVSS 7.8 (high), 2025-04-28: Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local…
CVE-2024-25971 - CVSS 6.5 (medium), 2024-03-28: Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially…
CVE-2024-22454 - CVSS 8.8 (high), 2024-02-13: Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords. A remote unauthenticated…
CVE-2024-22445 - CVSS 7.2 (high), 2024-02-13: Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could…
CVE-2023-28062 - CVSS 8.8 (high), 2023-04-11: Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could…
CVE-2020-5356 - CVSS 7.7 (high), 2020-07-06: Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability.…